Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0660 State: PUBLISHED Published: 2002-08-10T04:00:00 Last Updated: 2024-08-08T02:56:38.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow attackers to cause a denial of service and possibly execute arbitrary code, a different vulnerability than CVE-2002-0728. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2002/dsa-140 - http://rhn.redhat.com/errata/RHSA-2002-152.html - http://rhn.redhat.com/errata/RHSA-2002-151.html
CVE ID: CVE-2002-0661 State: PUBLISHED Published: 2002-08-10T04:00:00 Last Updated: 2024-08-08T02:56:38.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. (dot dot) sequences containing \ (backslash) characters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102892744011436&w=2 - http://www.securityfocus.com/bid/5434 - http://www.iss.net/security_center/static/9808.php - http://httpd.apache.org/info/security_bulletin_20020908a.txt - http://marc.info/?l=bugtraq&m=1029
nter/static/9808.php - http://httpd.apache.org/info/security_bulletin_20020908a.txt - http://marc.info/?l=bugtraq&m=102951160411052&w=2 - https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55
c7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://li
ache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2002-0662 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5602 - http://www.iss.net/security_center/static/10002.php - http://www.debian.org/security/2002/dsa-160 - http://marc.info/?l=bugtraq&m=103115387102294&w=2 - http://www.redhat.com/support/errata/RHSA-2002-186.html - http://marc.info/?l=bugtraq&m=103098575826031&w=2
CVE ID: CVE-2002-0663 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large outgoing HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4366 - http://www.atstake.com/research/advisories/2002/a071502-1.txt - http://securityresponse.symantec.com/avcenter/security/Content/2002.07.15.html - http://www.securityfocus.com/bid/5237 - http://www
rityresponse.symantec.com/avcenter/security/Content/2002.07.15.html - http://www.securityfocus.com/bid/5237 - http://www.iss.net/security_center/static/9579.php
CVE ID: CVE-2002-0664 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T02:56:38.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103134154721846&w=2 - http://www.securityfocus.com/bid/5101 - http://www.iss.net/security_center/static/10057.php
CVE ID: CVE-2002-0665 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash (/) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.macromedia.com/v1/handlers/index.cfm?ID=23164 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0133.html - http://www.securityfocus.com/bid/5118 - http://marc.info/?l=bugtraq&m=102529402127195&w=2 - http://www.iss.net/security_center/static/9450.php
CVE ID: CVE-2002-0666 State: PUBLISHED Published: 2002-10-25T04:00:00 Last Updated: 2024-08-08T02:56:38.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service (kernel panic) via spoofed, short Encapsulating Security Payload (ESP) packets, which result in integer signedness errors. Additional Analyst Notes: - CVE Program Container: References: - http://razor.bindview.com/publish/advisories/adv_ipsec.html - http://www.iss.net/security_center/static/10411.php - http://www.securityfocus.com/bid/6011 - http://ww
adv_ipsec.html - http://www.iss.net/security_center/static/10411.php - http://www.securityfocus.com/bid/6011 - http://www.debian.org/security/2002/dsa-201 - http://www.kb.cert.org/vuls/id/459371 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-016.txt.asc
CVE ID: CVE-2002-0667 State: PUBLISHED Published: 2002-07-15T04:00:00 Last Updated: 2024-08-08T02:56:38.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 has a default null administrator password, which could allow remote attackers to gain access to the phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5214 - http://www.iss.net/security_center/static/9562.php - http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp - http://www.atstake.com/research/advisories/2002/a071202-1.txt
CVE ID: CVE-2002-0668 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows authenticated users to modify the Call Forwarding settings and hijack calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp - http://www.atstake.com/research/advisories/2002/a071202-1.txt - http://www.osvdb.org/5144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9563
CVE ID: CVE-2002-0669 State: PUBLISHED Published: 2003-02-11T05:00:00 Last Updated: 2024-08-08T02:56:38.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows administrators to cause a denial of service by modifying the SIP_AUTHENTICATE_SCHEME value to force authentication of incoming calls, which does not notify the user when an authentication failure occurs. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9564.php - http://www.atstake.com/research/advisories/2002/a071202-1.txt
CVE ID: CVE-2002-0670 State: PUBLISHED Published: 2002-07-15T04:00:00 Last Updated: 2024-08-08T02:56:38.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 uses Base64 encoded usernames and passwords for HTTP basic authentication, which allows remote attackers to steal and easily decode the passwords via sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9565.php - http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp - http://www.atstake.com/research/advisories/2002/a071202-1.txt
CVE ID: CVE-2002-0671 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the integrity of the applications, which could allow remote attackers to install Trojan horse applications via DNS spoofing. Additional Analyst Notes: - CVE Program Container: References: - http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp - http://www.atstake.com/research/advisories/2002/a071202-1.txt - http://www.securityfocus.com/bid/5224 - http://www.iss.net/security_center/static/9566
h/advisories/2002/a071202-1.txt - http://www.securityfocus.com/bid/5224 - http://www.iss.net/security_center/static/9566.php
CVE ID: CVE-2002-0672 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to restore the phone to factory defaults without authentication via a menu option, which sets the administrator password to null. Additional Analyst Notes: - CVE Program Container: References: - http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp - http://www.atstake.com/research/advisories/2002/a071202-1.txt - http://www.iss.net/security_center/static/9567.php
CVE ID: CVE-2002-0673 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp - http://www.atstake.com/research/advisories/2002/a071202-1.txt - http://www.iss.net/security_center/static/9568.php
CVE ID: CVE-2002-0674 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not "time out" an inactive administrator session, which could allow other users to perform administrator actions if the administrator does not explicitly end the authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp - http://www.atstake.com/research/advisories/2002/a071202-1.txt - http://www.securityfocus.com/bid/5221 - https://exchange.xforce.ibmcloud.com/vulnerabilities
sories/2002/a071202-1.txt - http://www.securityfocus.com/bid/5221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9569
CVE ID: CVE-2002-0675 State: PUBLISHED Published: 2002-07-15T04:00:00 Last Updated: 2024-08-08T02:56:38.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5223 - http://www.iss.net/security_center/static/9570.php - http://www.pingtel.com/PingtelAtStakeAdvisoryResponse.jsp - http://www.atstake.com/research/advisories/2002/a071202-1.txt
CVE ID: CVE-2002-0676 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5137 - http://www.securityfocus.com/bid/5176 - http://www.cunap.com/~hardingr/projects/osx/exploit.html - http://www.iss.net/security_center/static/9502.php
CVE ID: CVE-2002-0677 State: PUBLISHED Published: 2002-07-12T04:00:00 Last Updated: 2024-08-08T02:56:39.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20021102-02-P - ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt - http://www.cert.org/advisories/CA-2002-2
://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt - http://www.cert.org/advisories/CA-2002-20.html - http://www.kb.cert.org/vuls/id/975403 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A91 - http://marc.info/?l=bugtraq&m=102635906423617&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1099
CVE ID: CVE-2002-0678 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.28/CSSA-2002-SCO.28.txt - http://www.cert.org/advisories/CA-2002-20.html - http://marc.info/?l=bugtraq&m=102635906423617&w=2 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199 - http://archives.neohapsis.co
635906423617&w=2 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199 - http://archives.neohapsis.com/archives/aix/2002-q3/0002.html - http://archives.neohapsis.com/archives/aix/2002-q3/0002.html - http://www.kb.cert.org/vuls/id/299816 - ftp://patches.sgi.com/support/free/security/advisories/20021101-01-P - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A175 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A80 - http://www.securityfocus.com/bid/5083 - http://www.iss.net/security_center/static/9527.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2770
CVE ID: CVE-2002-0679 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A177 - http://www.iss.net/security_center/static/9822.php - http://marc.info/?l=bugtraq&m=102917002523536&w=2 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199
tp://marc.info/?l=bugtraq&m=102917002523536&w=2 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0207-199 - http://www.securityfocus.com/bid/5444 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY32792&apar=only - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A192 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F46366&zone_32=category%3Asecurity - http://www.cert.org/advisories/CA-2002-26.html - http://www-1.ibm.com/support/search.wss?rs=0&q=IY32793&apar=only - http://www.kb.cert.org/vuls/id/387387
CVE ID: CVE-2002-0680 State: PUBLISHED Published: 2002-07-12T04:00:00 Last Updated: 2024-08-08T02:56:38.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/81099 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html - http://marc.info/?l=bugtraq&m=102709382714597&w=2 - http://freecode.com/pro
s.com/archives/vulnwatch/2002-q3/0013.html - http://marc.info/?l=bugtraq&m=102709382714597&w=2 - http://freecode.com/projects/embedthis-goahead-webserver/releases/343539 - http://marc.info/?l=bugtraq&m=102631742711795&w=2
CVE ID: CVE-2002-0681 State: PUBLISHED Published: 2002-07-12T04:00:00 Last Updated: 2024-08-08T02:56:38.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5198 - http://osvdb.org/81099 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0013.html - http://www.iss.net/security_center/static/9518.php - http://freecode.com/projects/embedthis-goahead-webserver/releas
l - http://www.iss.net/security_center/static/9518.php - http://freecode.com/projects/embedthis-goahead-webserver/releases/343539 - http://marc.info/?l=bugtraq&m=102631742711795&w=2
CVE ID: CVE-2002-0682 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:56:38.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4973 - http://www.securityfocus.com/bid/5193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9520 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0014.html - http://marc.info/?l=bugtra
m/vulnerabilities/9520 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0014.html - http://marc.info/?l=bugtraq&m=102631703811297&w=2 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2002-0683 State: PUBLISHED Published: 2002-07-12T04:00:00 Last Updated: 2024-08-08T02:56:38.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102631808212876&w=2 - http://www.securityfocus.com/bid/5192 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0015.html - http://www.osvdb.org/6592 - http://www.iss.net/security_center/static/9521.php
CVE ID: CVE-2002-0684 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T02:56:38.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-050.php - http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507 - http://www.kb.cert.org/vuls/id/542971 -
-2002-050.php - http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507 - http://www.kb.cert.org/vuls/id/542971 - http://marc.info/?l=bugtraq&m=102581482511612&w=2 - http://rhn.redhat.com/errata/RHSA-2002-139.html
CVE ID: CVE-2002-0685 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:56:38.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4364 - http://www.iss.net/security_center/static/9525.php - http://www.kb.cert.org/vuls/id/821139 - http://www.securityfocus.com/bid/5202 - http://marc.info/
nter/static/9525.php - http://www.kb.cert.org/vuls/id/821139 - http://www.securityfocus.com/bid/5202 - http://marc.info/?l=ntbugtraq&m=102639521518942&w=2 - http://marc.info/?l=bugtraq&m=102634756815773&w=2 - http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.04/hotfix/ReadMe.txt
CVE ID: CVE-2002-0686 State: PUBLISHED Published: 2002-07-15T04:00:00 Last Updated: 2024-08-08T02:56:38.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102622220416889&w=2 - http://www.nextgenss.com/vna/sun-iws.txt - http://www.securityfocus.com/bid/4851 - http://www.iss.net/security_center/static/9506.php - http://www.kb.cert.org/vuls/id/612843