Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1510 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000533 - http://www.redhat.com/support/errata/RHSA-2003-064.html - http://www.redhat.com/support/errata/RHSA-2003-065.html - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55602 - http://wuarchive.wustl.edu/mirrors/NetBSD/NetBSD-current/xsrc/xfree/xc/pro
n.com/pub-cgi/retrieve.pl?doc=fsalert/55602 - http://wuarchive.wustl.edu/mirrors/NetBSD/NetBSD-current/xsrc/xfree/xc/programs/Xserver/hw/xfree86/CHANGELOG - http://www.iss.net/security_center/static/11389.php
CVE ID: CVE-2002-1511 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/56161 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640 - http://changelogs.credativ.org/debian/pool/main/v/vnc/vnc_3.3.6-3/changelog - http://www.redhat.com/support/errata/RHSA-2003-041.html - http://www.iss.net/security_center/static/11384.php - http
g - http://www.redhat.com/support/errata/RHSA-2003-041.html - http://www.iss.net/security_center/static/11384.php - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022 - http://security.gentoo.org/glsa/glsa-200302-15.xml - http://www.redhat.com/support/errata/RHSA-2003-068.html - http://www.securityfocus.com/bid/6905
CVE ID: CVE-2002-1512 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5708 - http://www.iss.net/security_center/static/10101.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0154.html
CVE ID: CVE-2002-1513 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5790 - http://www.iss.net/security_center/static/10236.php - http://online.securityfocus.com/archive/1/293070 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0010.html
p - http://online.securityfocus.com/archive/1/293070 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0010.html - http://archives.neohapsis.com/archives/compaq/2002-q4/0000.html
CVE ID: CVE-2002-1514 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10196.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0311.html - http://www.securityfocus.com/bid/5805
CVE ID: CVE-2002-1515 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.coolforum.net/index.php?p=dlcoolforum - http://online.securityfocus.com/archive/1/295358 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0001.html - http://www.securityfocus.com/bid/5973 - http://www.iss.net/security_center/static/10237.php
CVE ID: CVE-2002-1516 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/n-004.shtml - http://www.securityfocus.com/bid/5889 - http://www.iss.net/security_center/static/10272.php - ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P
CVE ID: CVE-2002-1517 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P - http://www.ciac.org/ciac/bulletins/n-004.shtml - ftp://patches.sgi.com/support/free/security/advisories/20021103-02-P - ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P - http://www.securityfocus.com/bid/5897 - http://www.osvdb.org/8579 - ftp:
upport/free/security/advisories/20021103-01-P - http://www.securityfocus.com/bid/5897 - http://www.osvdb.org/8579 - ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P - http://www.iss.net/security_center/static/10275.php
CVE ID: CVE-2002-1518 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/n-004.shtml - http://www.iss.net/security_center/static/10276.php - http://www.securityfocus.com/bid/5893 - http://www.osvdb.org/8580 - ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P
CVE ID: CVE-2002-1519 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html - http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html - http://www.iss.net/security_center/static/10217.php - http://www.s
es.neohapsis.com/archives/bugtraq/2002-09/0335.html - http://www.iss.net/security_center/static/10217.php - http://www.securityfocus.com/bid/5814 - http://www.osvdb.org/4924
CVE ID: CVE-2002-1520 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0325.html - http://archives.neohapsis.com/archives/bugtraq/2002-09/0335.html - http://www.osvdb.org/4831 - http://www.iss.net/security_center/static/10
hapsis.com/archives/bugtraq/2002-09/0335.html - http://www.osvdb.org/4831 - http://www.iss.net/security_center/static/10218.php - http://www.securityfocus.com/bid/5815
CVE ID: CVE-2002-1521 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10198.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0128.html - http://www.securityfocus.com/bid/5803
CVE ID: CVE-2002-1522 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0075.html - http://www.securityfocus.com/bid/5899 - http://archives.neohapsis.com/archives/bugtraq/2002-10/0194.html - http://www.iss.net/security_center/static/10286.php
CVE ID: CVE-2002-1523 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\ (dot-dot backslash) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0181.html - http://www.iss.net/security_center/static/10366.php - http://www.da-home.de/miniserver/update.html
CVE ID: CVE-2002-1524 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0346.html - http://www.securityfocus.com/bid/5832 - http://www.iss.net/security_center/static/10228.php
CVE ID: CVE-2002-1525 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/293545 - http://www.securityfocus.com/bid/5828 - http://www.iss.net/security_center/static/10225.php
CVE ID: CVE-2002-1526 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10205.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html - http://www.securityfocus.com/bid/5824
CVE ID: CVE-2002-1527 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10205.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0131.html - http://www.iss.net/security_center/static/10204.php - http://www.securityfocus.com/bid/58
/vulnwatch/2002-q3/0131.html - http://www.iss.net/security_center/static/10204.php - http://www.securityfocus.com/bid/5823
CVE ID: CVE-2002-1528 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10350.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0147.html - http://www.securityfocus.com/bid/5941
CVE ID: CVE-2002-1529 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10319.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html - http://www.securityfocus.com/bid/5928
CVE ID: CVE-2002-1530 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html - http://www.securityfocus.com/bid/5929 - http://www.iss.net/security_center/static/10320.php
CVE ID: CVE-2002-1531 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html - http://www.securityfocus.com/bid/5930 - http://www.iss.net/security_center/static/10321.php
CVE ID: CVE-2002-1532 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminating /r/n/r/n (CRLF) sequence, which causes the interface to wait for the sequence and blocks other users from accessing it. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5931 - http://www.iss.net/security_center/static/10322.php - http://archives.neohapsis.com/archives/bugtraq/2002-
om/bid/5931 - http://www.iss.net/security_center/static/10322.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html
CVE ID: CVE-2002-1533 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0337.html - http://www.iss.net/security_center/static/10219.php - http://www.securityfocus.com/bid/5821
CVE ID: CVE-2002-1534 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0083.html - http://www.securityfocus.com/bid/5904 - http://www.iss.net/security_center/static/10297.php
CVE ID: CVE-2002-1535 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5959 - http://www.iss.net/security_center/static/10363.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0190.html - http://securityresponse.symantec.com/avcenter/security/Content
chives.neohapsis.com/archives/bugtraq/2002-10/0190.html - http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11a.html
CVE ID: CVE-2002-1536 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables in hpled.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10397.php - http://online.securityfocus.com/archive/1/296163 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0028.html - h
ttp://online.securityfocus.com/archive/1/296163 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0028.html - http://www.securityfocus.com/bid/6007
CVE ID: CVE-2002-1537 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6056 - http://www.iss.net/security_center/static/10489.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html - http://www.osvdb.org/4284
CVE ID: CVE-2002-1538 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0366.html - http://www.securityfocus.com/bid/6048 - http://www.iss.net/security_center/static/10473.php
CVE ID: CVE-2002-1539 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10488.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0382.html - http://www.securityfocus.com/bid/6053
CVE ID: CVE-2002-1540 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0369.html - http://www.osvdb.org/6258 - http://www.iss.net/security_center/static/10475.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0346.html
CVE ID: CVE-2002-1541 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash). Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10466.php - http://www.securityfocus.com/bid/6044 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0041.html
CVE ID: CVE-2002-1542 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10462.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0344.html - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0040.html - http://www.securityfocus.com/bid/6043
CVE ID: CVE-2002-1543 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-025.txt.asc - http://www.securityfocus.com/bid/6036 - http://www.iss.net/security_center/static/10458.php - http://www.osvdb.org/7570
CVE ID: CVE-2002-1544 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html
CVE ID: CVE-2002-1545 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html