Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0006 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7856 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000453 - http://rhn.redhat.com/errata/RHSA
nerabilities/7856 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000453 - http://rhn.redhat.com/errata/RHSA-2002-005.html - http://online.securityfocus.com/advisories/3806 - http://www.securityfocus.com/bid/3830 - http://marc.info/?l=bugtraq&m=101060676210255&w=2 - http://www.debian.org/security/2002/dsa-099
CVE ID: CVE-2002-0007 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2002-001.html - http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html - http://www.bugzilla.org/security2_14_1.html - http://bugzilla.mozilla.org/show_bug.cgi?id=54901 - https://exchange.xforc
http://www.bugzilla.org/security2_14_1.html - http://bugzilla.mozilla.org/show_bug.cgi?id=54901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7812 - http://www.securityfocus.com/bid/3792
CVE ID: CVE-2002-0008 State: PUBLISHED Published: 2002-01-10T05:00:00 Last Updated: 2024-08-08T02:35:16.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/show_bug.cgi?id=108385 - http://www.iss.net/security_center/static/7805.php - http://www.securityfocus.com/bid/3794 - http://rhn.redhat.com
385 - http://www.iss.net/security_center/static/7805.php - http://www.securityfocus.com/bid/3794 - http://rhn.redhat.com/errata/RHSA-2002-001.html - http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html - http://www.securityfocus.com/bid/3793 - http://www.bugzilla.org/security2_14_1.html - http://bugzilla.mozilla.org/show_bug.cgi?id=108516 - http://www.iss.net/security_center/static/7804.php
CVE ID: CVE-2002-0009 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2002-001.html - http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html - http://www.bugzilla.org/security2_14_1.html - http://www.securityfocus.com/bid/3798 - http://www.iss.net/security_center/static/7802.php -
.org/security2_14_1.html - http://www.securityfocus.com/bid/3798 - http://www.iss.net/security_center/static/7802.php - http://bugzilla.mozilla.org/show_bug.cgi?id=102141
CVE ID: CVE-2002-0010 State: PUBLISHED Published: 2002-01-10T05:00:00 Last Updated: 2024-08-08T02:35:17.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges. Additional Analyst Notes: - CVE Program Container: Refer
eges to be modified by attackers with blessgroupset privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-01/0052.html - http://www.securityfocus.com/bid/3805 - http://www.securityfocus.com/bid/3802 - http://www.securityfocus.com/bid/3801 - http://www.iss.net/security_center/static/7811.php - http://www.iss.net/security_center/static/7814.php - http://bugzilla.mozilla.org/show_bug.cgi?id=108821 - http://www.iss.net/security_center/static/7813.php - http://bugzilla.mozilla.org/show_bug.cgi?id=108812 - http://rhn.redhat.com/errata/RHSA-2002-001.html - http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html - ht
http://rhn.redhat.com/errata/RHSA-2002-001.html - http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html - http://www.iss.net/security_center/static/7807.php - http://www.bugzilla.org/bugzilla2.14to2.14.1.patch - http://bugzilla.mozilla.org/show_bug.cgi?id=108822 - http://www.bugzilla.org/security2_14_1.html - http://www.iss.net/security_center/static/7809.php - http://bugzilla.mozilla.org/show_bug.cgi?id=109679 - http://www.securityfocus.com/bid/3804 - http://bugzilla.mozilla.org/show_bug.cgi?id=109690
CVE ID: CVE-2002-0011 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2002-001.html - http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html - http://www.bugzilla.org/security2_14_1.html - http://bugzilla.mozilla.org/show_bug.cgi?id=98146 - http://www.securityfocus.com/bid/3800 - http://www.iss.net/security_center/static/7803.php
CVE ID: CVE-2002-0012 State: PUBLISHED Published: 2002-02-18T05:00:00 Last Updated: 2024-08-08T02:35:16.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-20
available. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-163.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A144 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006 - http://www.securityfocus.com/bid/5043 - http://www.securityfocus.com/advisories/4211 - ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A - http://www.cert.org/advisories/CA-2002-03.html - http://www.kb.cert.org/vuls/id/107186 - https://oval.cisecurity.org/repository/search/def
g/advisories/CA-2002-03.html - http://www.kb.cert.org/vuls/id/107186 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1048 - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298 - http://www.iss.net/security_center/alerts/advise110.php
CVE ID: CVE-2002-0013 State: PUBLISHED Published: 2002-02-18T05:00:00 Last Updated: 2024-08-08T02:35:17.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available. Additional Analyst Notes: - CVE Pro
SNMP-related candidates will be updated when more accurate information is available. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2001-163.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-57404-1 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A87 - ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A - http://www.cert.org/advisories/CA-2002-03.html - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html - https://oval.cisecurity.org/repository/search/definit
w.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298 - http://www.kb.cert.org/vuls/id/854306 - http://www.iss.net/security_center/alerts/advise110.php
CVE ID: CVE-2002-0014 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&). Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000460 - http://www.securityfocus.com/bid/3815 - http://rhn.redhat.com/errata/RHSA-2002-009.html - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-015 - http://marc.info/?l=bugtraq&m=101027841605918&w=2
CVE ID: CVE-2002-0017 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/alerts/advise113.php - http://www.iss.net/security_center/static/7846.php - http://www.securityfocus.com/bid/4421 - ftp://patches.sgi.com/support/free/security/advisories/20020201-01-P
CVE ID: CVE-2002-0018 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3997 - https://exchange.xforce.
l Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8023 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A159 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-001 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A64
CVE ID: CVE-2002-0020 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A424 - http://www.securityfocus.com/bid/4061 - http://www.iss.net/security_center/static/8094.php - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-004
CVE ID: CVE-2002-0021 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:16.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Network Product Identification (PID) Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service (crash) via a malformed product announcement. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-002 - http://www.osvdb.org/2041 - http://www.securityfocus.com/bid/4045
CVE ID: CVE-2002-0022 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-04.html - http://marc.info/?l=bugtraq&m=101362984930597&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A925 - ht
&m=101362984930597&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A925 - http://www.iss.net/security_center/static/8116.php - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005 - http://online.securityfocus.com/archive/1/258614 - http://www.securityfocus.com/bid/4080
CVE ID: CVE-2002-0023 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77 - http://www.securityfocus.com/bid/3767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7758 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50 -
d.com/vulnerabilities/7758 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50 - http://www.osvdb.org/3030 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40 - http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
CVE ID: CVE-2002-0024 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4087 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
CVE ID: CVE-2002-0025 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify which application is used to process a document. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8118 - http://online.securityfocus.com/archive/1/255767 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
CVE ID: CVE-2002-0026 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A32 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
oval%3Aorg.mitre.oval%3Adef%3A12 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A23 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005 - http://www.securityfocus.com/bid/4082
CVE ID: CVE-2002-0027 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in MS:MS01-058/CAN-2001-0874. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/3031 - http://www.securityfocus.com/archive/1/246522 - http://www.securityfocus.com/bid/3721 - https://oval.cisecurity.org/reposito
://www.securityfocus.com/archive/1/246522 - http://www.securityfocus.com/bid/3721 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A974 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005
CVE ID: CVE-2002-0028 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:16.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-02.html - http://marc.info/?l=bugtraq&m=101043894627851&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7743 - http://www.kb.cert.org/vuls/id/570167 - http://www.securityfocus.com/bid/3813 - http://marc.info/?l=vuln-dev&m=101043076806401&w=2
CVE ID: CVE-2002-0029 State: PUBLISHED Published: 2002-11-21T05:00:00 Last Updated: 2024-08-08T02:35:17.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10624.php - ftp://ftp.netbsd.org/pub/NetBSD
E Program Container: References: - http://www.iss.net/security_center/static/10624.php - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.asc - http://www.cert.org/advisories/CA-2002-31.html - http://www.securityfocus.com/bid/6186 - http://www.kb.cert.org/vuls/id/844360 - http://www.isc.org/products/BIND/bind-security.html - http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html - ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P
CVE ID: CVE-2002-0030 State: PUBLISHED Published: 2003-03-26T05:00:00 Last Updated: 2024-08-08T02:35:17.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/549913 - http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html - http://www.kb.cert.org/vuls/id/JSHA-5EZQGZ - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/
rch/004230.html - http://www.kb.cert.org/vuls/id/JSHA-5EZQGZ - http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html
CVE ID: CVE-2002-0031 State: PUBLISHED Published: 2002-06-11T04:00:00 Last Updated: 2024-08-08T02:35:17.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-16.html - http://www.kb.cert.org/vuls/id/137115 - http://online.securityfocus.com/archive/1/274223 - http://www.securityfocus.com/bid/4837
CVE ID: CVE-2002-0032 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-16.html - http://online.securityfocus.com/archive/1/274223 - http://www.securityfocus.com/bid/4838 - http://www.kb.cert.org/vuls/id/172315 - http://www.iss.net/security_center/static/9184.php
CVE ID: CVE-2002-0033 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124 - http://www.kb.cert.org/vuls/id/635811 - http://www.cert.org/advisories/CA-2002-11.html - http://www.securityfocus.com/bid/4674 - https:
ert.org/vuls/id/635811 - http://www.cert.org/advisories/CA-2002-11.html - http://www.securityfocus.com/bid/4674 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A31 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.html - http://www.iss.net/security_center/static/8999.php