Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0875 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc - http://www.redhat.com/support/errata/RHSA-2005-005.html - ftp://patches.sgi.com/support/free/security/advisories/20000301-03-I - http://www.iss.net/security_center/static/9880.php - http://www.debian.org/security/2002/dsa-154 - http://www.
01-03-I - http://www.iss.net/security_center/static/9880.php - http://www.debian.org/security/2002/dsa-154 - http://www.securityfocus.com/bid/5487
CVE ID: CVE-2002-0876 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/281265 - http://www.securityfocus.com/bid/4897 - http://www.iss.net/security_center/static/9225.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html
CVE ID: CVE-2002-0877 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9224.php - http://www.securityfocus.com/bid/4896 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html
CVE ID: CVE-2002-0878 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-06/0010.html - http://www.iss.net/security_center/static/9268.php - http://www.securityfocus.com/bid/4931
CVE ID: CVE-2002-0879 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-05/0256.html - http://www.iss.net/security_center/static/9196.php - http://www.securityfocus.com/bid/4882
CVE ID: CVE-2002-0880 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:48.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demonstrated by (1) "jolt", (2) "jolt2", (3) "raped", (4) "hping2", (5) "bloop", (6) "bubonic", (7) "mutant", (8) "trash", and (9) "trash2." Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml
CVE ID: CVE-2002-0881 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/273673 - http://www.iss.net/security_center/static/9144.php - http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml - http://www.securityfocus.com/bid/4799
CVE ID: CVE-2002-0882 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/273673 - http://www.securityfocus.com/bid/4794 - http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtm
http://www.securityfocus.com/bid/4794 - http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml - http://www.securityfocus.com/bid/4798 - http://www.iss.net/security_center/static/9142.php - http://www.iss.net/security_center/static/9143.php
CVE ID: CVE-2002-0883 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9202.php - http://www.securityfocus.com/bid/4802 - http://ftp.support.compaq.com/patches/.new/html/SSRT2179.shtml
CVE ID: CVE-2002-0884 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4791 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html - http://online.securityfocus.com/archive/1/273584 - ftp://ftp.caldera.c
hapsis.com/archives/vulnwatch/2002-q2/0074.html - http://online.securityfocus.com/archive/1/273584 - ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt - http://www.iss.net/security_center/static/9150.php
CVE ID: CVE-2002-0885 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4791 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html - http://online.securityfocus.com/archive/1/273584 - ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CS
html - http://online.securityfocus.com/archive/1/273584 - ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt - http://www.iss.net/security_center/static/9150.php
CVE ID: CVE-2002-0886 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/CBOS-DoS.shtml - http://www.securityfocus.com/bid/4813 - https://exchange.xforce.ibmcloud.com/vulnerabili
arp/public/707/CBOS-DoS.shtml - http://www.securityfocus.com/bid/4813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9152 - http://www.securityfocus.com/bid/4814 - http://www.iss.net/security_center/static/9153.php - http://www.iss.net/security_center/static/9151.php - http://www.securityfocus.com/bid/4815
CVE ID: CVE-2002-0887 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=99057164129869&w=2 - http://www.iss.net/security_center/static/9210.php - http://www.securityfocus.com/bid/4875 - ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt
CVE ID: CVE-2002-0888 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9185.php - http://archives.neohapsis.com/archives/bugtraq/2002-06/0102.html - http://www.securityfocus.com/bid/4841 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0230.html
CVE ID: CVE-2002-0889 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/269969 - http://marc.info/?l=vuln-dev&m=102003707432457&w=2 - http://www.iss.net/security_center/static/8949.php - http://www.securityfocus.com/bid/4614
CVE ID: CVE-2002-0891 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9186.php - http://www.securityfocus.com/bid/4842 - http://online.securityfocus.com/archive/1/274240 - http://www.netscreen.com/support/ns25_reboot.html
CVE ID: CVE-2002-0892 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/273615 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html - http://www.iss.net/security_center/static/9139.php - http://www.newatlanta.com/do/findFaq?faq
nwatch/2002-q2/0077.html - http://www.iss.net/security_center/static/9139.php - http://www.newatlanta.com/do/findFaq?faq_id=151 - http://www.securityfocus.com/bid/4793
CVE ID: CVE-2002-0893 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/273615 - http://www.securityfocus.com/bid/4795 - http://www.iss.net/security_center/static/9140.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html
CVE ID: CVE-2002-0894 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/273615 - http://www.securityfocus.com/bid/4796 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html - http://www.iss.net/security_center/static/9141.php
CVE ID: CVE-2002-0895 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4792 - http://www.iss.net/security_center/static/9138.php - http://online.securityfocus.com/archive/1/273581
CVE ID: CVE-2002-0896 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/272582 - http://www.securityfocus.com/bid/4746 - http://www.iss.net/security_center/static/9100.php
CVE ID: CVE-2002-0897 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4820 - http://www.iss.net/security_center/static/9165.php - http://online.securityfocus.com/archive/1/274020 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0079.html
CVE ID: CVE-2002-0898 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=102256058220402&w=2 - http://online.securityfocus.com/archive/1/274202 - http://www.iss.net/security_center/static/9188.php - http://www.opera.com/windows/changelog/log603.html - http://www.securityfocus.com/bid/4834
CVE ID: CVE-2002-0899 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot). Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/274205 - http://www.iss.net/security_center/static/9179.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0084.html - http://www.securityfocus.com/bid/4833
CVE ID: CVE-2002-0900 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup capability. Additional Analyst Notes: - CVE Program Container: References: - http://www.rubin.ch/pgp/src/patch_buffoverflow20020525 - http://www.iss.net/security_center/static/9171.php - http://online.securityfocus.com/archive/1/274107 - http://www.securityfocus.com/bid/4828
CVE ID: CVE-2002-0901 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9181.php - http://online.securityfocus.com/arch
ogram Container: References: - http://www.iss.net/security_center/static/9181.php - http://online.securityfocus.com/archive/1/274215 - http://www.securityfocus.com/bid/4836 - http://www.iss.net/security_center/static/9182.php - http://www.securityfocus.com/bid/4840
CVE ID: CVE-2002-0902 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4858 - http://online.securityfocus.com/archive/1/274273 - http://www.iss.net/security_center/static/9178.php
CVE ID: CVE-2002-0903 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack on the new user ID and the code value. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9177.php - http://online.securityfocus.com/archive/1/274269 - http://www.securityfocus
ww.iss.net/security_center/static/9177.php - http://online.securityfocus.com/archive/1/274269 - http://www.securityfocus.com/bid/4859
CVE ID: CVE-2002-0904 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.kismetwireless.net/CHANGELOG - http://www.securityfocus.com/bid/4883 - http://www.iss.net/security_center/static/9213.php - http://marc.info/?l=vuln-dev&m=102269718506080&w=2 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0259.html
CVE ID: CVE-2002-0905 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4891 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0270.html - http://www.iss.net/security_center/static/9219.php
CVE ID: CVE-2002-0906 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server. Additional Analyst Notes: - CVE Program Container: References: - http://www.sendmail.org/8.12.5.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2183 - http://www.kb.cert.org/vuls/id/814627 - http://www.securityfocus.com/bid/5122 - http://www.iss.net/security_cente
2183 - http://www.kb.cert.org/vuls/id/814627 - http://www.securityfocus.com/bid/5122 - http://www.iss.net/security_center/static/9443.php
CVE ID: CVE-2002-0907 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-". Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9251.php - http://www.securityfocus.com/bid/4934 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0016.html
CVE ID: CVE-2002-0908 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9174.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0214.html - http://www.securityfocus.com/bid/4760
CVE ID: CVE-2002-0909 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:03:49.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments (2) -f, (3) -n, (4) -D, (5) -M, or (6) -P, or via long environment variables (7) JNAMES or (8) MAILSERVER. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102306166201275&w=2 - http://www.securityfocus.com/bid/4900 - http://www.securityfocus.com/bid/4899 - http://www.iss.net/security_cent
5&w=2 - http://www.securityfocus.com/bid/4900 - http://www.securityfocus.com/bid/4899 - http://www.iss.net/security_center/static/9227.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0287.html - http://marc.info/?l=vuln-dev&m=102297259123103&w=2 - http://www.iss.net/security_center/static/9226.php