Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1248 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service (crash) via a GET request for a "%" URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/advisory/11.04.02b.txt - http://www.securityfocus.com/bid/6098 - http://www.iss.net/security_center/static/10534.php - http://marc.info/?l=bugtraq&m=103642597302308&w=2
CVE ID: CVE-2002-1250 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/advisory/11.01.02.txt - http://www.securityfocus.com/bid/6094 - http://www.iss.net/security_center/static/10519.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html
CVE ID: CVE-2002-1251 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-186 - http://www.securityfocus.com/bid/6089 - http://www.iss.net/security_center/static/10527.php
CVE ID: CVE-2002-1252 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10520.php - http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21811 - http://www.securityfocus.com/bid/6647
CVE ID: CVE-2002-1253 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute commands or modify files. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/advisory/11.01.02.txt - http://www.iss.net/security_center/static/11300.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html
CVE ID: CVE-2002-1254 State: PUBLISHED Published: 2002-11-27T05:00:00 Last Updated: 2024-08-08T03:19:28.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6028 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 - http://marc.info/?l=bugtraq&m=103530131201191&w=2 - https://exchange.xfo
urity-updates/securitybulletins/2002/ms02-066 - http://marc.info/?l=bugtraq&m=103530131201191&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10432 - http://www.iss.net/security_center/static/10438.php - http://www.iss.net/security_center/static/10437.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A388 - http://www.iss.net/security_center/static/10436.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A408 - http://www.iss.net/security_center/static/10435.php - http://security.greymagic.com/adv/gm012-ie/ - http://www.ciac.org/ciac/bulletins/n-018.shtml - http://www.iss.net/security_center/static/
reymagic.com/adv/gm012-ie/ - http://www.ciac.org/ciac/bulletins/n-018.shtml - http://www.iss.net/security_center/static/10439.php
CVE ID: CVE-2002-1255 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10763 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-067 - http://www.securityfocus.com/bid/6319
CVE ID: CVE-2002-1256 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-070 - https://oval.cisecurity.org/rep
s: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-070 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A277 - http://www.securityfocus.com/bid/6367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10843
CVE ID: CVE-2002-1257 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069 - http://www.securityfocus.com/bid/6371
CVE ID: CVE-2002-1258 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
es/securitybulletins/2002/ms02-069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A582
CVE ID: CVE-2002-1259 State: REJECTED Published: 2002-12-18T05:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2002-1260 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069 - http://www.ciac.org/ciac/bulletins/n-026.shtml - http://www.securityfocus.com/bid/6379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10833
CVE ID: CVE-2002-1261 State: REJECTED Published: 2002-12-17T05:00:00 Last Updated: 2002-12-18T10:00:00 Description: No description available.
CVE ID: CVE-2002-1262 State: PUBLISHED Published: 2002-12-11T05:00:00 Last Updated: 2024-08-08T03:19:28.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=ntbugtraq&m=103824668621672&w=2 - http://marc.info/?l=bugtraq&m=103910416824172&w=2 - http://marc.info/?l=bugtraq&m=103825484331857&w=2 - http://marc.info/?l=ntbugtraq&m=103909877717345&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-068
CVE ID: CVE-2002-1263 State: REJECTED Published: 2003-01-03T05:00:00 Last Updated: 2005-02-06T10:00:00 Description: No description available.
CVE ID: CVE-2002-1264 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL. Additional Analyst Notes: - CVE Program Container: References: - http://technet.oracle.com/deploy/security/pdf/2002alert46rev1.pdf - http://marc.info/?l=bugtraq&m=103643298712284&w=2 - http://www.iss.net/security_center/static/10524.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0060.html - http://www.osvdb.org/4013 - http://www.se
524.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0060.html - http://www.osvdb.org/4013 - http://www.securityfocus.com/bid/6085
CVE ID: CVE-2002-1265 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang). Additional Analyst Notes: - CVE Program Container: References: - http://www.info.apple.com/usen/security/security_updates.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2248 - http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0800.1 - http://www.iss.net/se
3Adef%3A2248 - http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0800.1 - http://www.iss.net/security_center/static/10539.php - http://www.securityfocus.com/bid/6103 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/51082 - ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P - http://www.kb.cert.org/vuls/id/266817
CVE ID: CVE-2002-1266 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File." Additional Analyst Notes: - CVE Program Container: References: - http://www.info.apple.com/usen/security/security_updates.html - http://www.osvdb.org/7057 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10818
CVE ID: CVE-2002-1267 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible." Additional Analyst Notes: - CVE Program Container: References: - http://www.info.apple.com/usen/security/security_updates.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10824 - http://www.osvdb.org/7058
CVE ID: CVE-2002-1268 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD." Additional Analyst Notes: - CVE Program Container: References: - http://www.info.apple.com/usen/security/security_updates.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10828 - http://www.osvdb.org/7059
CVE ID: CVE-2002-1269 State: PUBLISHED Published: 2002-12-03T05:00:00 Last Updated: 2024-08-08T03:19:28.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://www.info.apple.com/usen/security/security_updates.html
CVE ID: CVE-2002-1270 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call. Additional Analyst Notes: - CVE Program Container: References: - http://www.info.apple.com/usen/security/security_updates.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10829 - http://www.osvdb.org/7060
CVE ID: CVE-2002-1271 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2003/dsa-386 - http://www.iss.net/security_center/static/10548.php - http://marc.info/?l=bugtraq&m=103659723101369&w=2 - http://marc.info/?l=bugtraq&m=103679569705086&w=2 - http://www.securityfo
//marc.info/?l=bugtraq&m=103659723101369&w=2 - http://marc.info/?l=bugtraq&m=103679569705086&w=2 - http://www.securityfocus.com/bid/6104 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php - http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html
CVE ID: CVE-2002-1272 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10664 - http://www.securityfocus.com/bid/6220 - http://www.cert.org/advisories/CA-2002-32.html - http://www.kb.cert.org/vuls/id/181721
CVE ID: CVE-2002-1275 State: PUBLISHED Published: 2002-11-10T05:00:00 Last Updated: 2024-08-08T03:19:28.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input." Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html - http://www.securityfocus.com/bid/6079 - http://www.debian.org/security/2002/dsa-192 - http://www.iss.net/security_center/static/10526.php
CVE ID: CVE-2002-1276 State: PUBLISHED Published: 2002-11-14T05:00:00 Last Updated: 2024-08-08T03:19:28.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-191 - http://www.securityfocus.com/bid/7019 - http://www.iss.net/security_center/static/10634.php - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=167471 - http://secunia.com/advisories
curity_center/static/10634.php - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=167471 - http://secunia.com/advisories/8220 - http://www.redhat.com/support/errata/RHSA-2003-042.html
CVE ID: CVE-2002-1277 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000548 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-085.php - http://www.redhat.com/support/errata/RHSA-2003-043.html - http://www.securityfocus.com/bid/
ty/2002/MDKSA-2002-085.php - http://www.redhat.com/support/errata/RHSA-2003-043.html - http://www.securityfocus.com/bid/6119 - http://www.debian.org/security/2002/dsa-190 - http://www.redhat.com/support/errata/RHSA-2003-009.html - http://www.iss.net/security_center/static/10560.php
CVE ID: CVE-2002-1278 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10554.php - http://www.osvdb.org/6066 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000544 - http://ww
tic/10554.php - http://www.osvdb.org/6066 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000544 - http://www.securityfocus.com/bid/6118
CVE ID: CVE-2002-1279 State: PUBLISHED Published: 2002-11-14T05:00:00 Last Updated: 2024-08-08T03:19:28.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file (-C option). Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-194 - http://lists.masqmail.cx/pipermail/masqmail/2002-November/000041.html - http://www.securityfocus.com/bid/6164 - http://www.iss.net/security_center/static/10605.php - http://lists.masqmail.cx/pipermail/masqmail/2002-November/000040
- http://www.iss.net/security_center/static/10605.php - http://lists.masqmail.cx/pipermail/masqmail/2002-November/000040.html
CVE ID: CVE-2002-1280 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T03:19:28.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.isskk.co.jp/support/XPressUpdates/RS/RS65ECSR15RNj.html
CVE ID: CVE-2002-1281 State: PUBLISHED Published: 2002-11-14T05:00:00 Last Updated: 2024-08-08T03:19:28.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt - http://www.iss.net/security_center/static/10602.php - http://marc.info/?l=bugtraq&m=103728981029342&w=2 - http://secunia.com/advisories/8298 - http://www.kde.org/info/security/advisory-20021111-1.
gtraq&m=103728981029342&w=2 - http://secunia.com/advisories/8298 - http://www.kde.org/info/security/advisory-20021111-1.txt - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php - http://marc.info/?l=bugtraq&m=103712550205730&w=2 - http://www.debian.org/security/2002/dsa-204 - http://www.redhat.com/support/errata/RHSA-2002-220.html - http://www.securityfocus.com/bid/6182
CVE ID: CVE-2002-1282 State: PUBLISHED Published: 2002-11-14T05:00:00 Last Updated: 2024-08-08T03:19:28.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt - http://marc.info/?l=bugtraq&m=103728981029342&w=2 - http://secunia.com/advisories/8298 - http://www.iss.net/security_center/static/10603.php - http://www.kde.org/info/security/advisory-20021111-1.txt - http://www.linux-mandrake.
security_center/static/10603.php - http://www.kde.org/info/security/advisory-20021111-1.txt - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php - http://marc.info/?l=bugtraq&m=103712550205730&w=2 - http://www.debian.org/security/2002/dsa-204 - http://www.redhat.com/support/errata/RHSA-2002-220.html - http://www.securityfocus.com/bid/6182
CVE ID: CVE-2002-1283 State: PUBLISHED Published: 2002-11-14T05:00:00 Last Updated: 2024-08-08T03:19:28.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name (DN) attribute. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44969 - http://www.securityfocus.com/bid/6154 - http://marc.info/?l=bugtraq&m=103703760321408&w=2 - http://support.novell.com/servlet/tidfinder/2963651
CVE ID: CVE-2002-1284 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10629 - http://devel-home.kde.org/~kgpg/bug.html - http://www.securityfocus.com/bid/6152 - http://marc.info/?l=bugtraq&m=103702926611286&w=2
CVE ID: CVE-2002-1285 State: PUBLISHED Published: 2002-11-14T05:00:00 Last Updated: 2024-08-08T03:19:28.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6077 - http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html - http://www.iss.net/security_center/static/10525.php