Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1084 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/284229 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html - http://www.iss.net/security_center/static/9711.php
CVE ID: CVE-2002-1085 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/284229 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html - http://www.iss.net/security_center/static/9712.php
CVE ID: CVE-2002-1086 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/284229 - http://www.iss.net/security_center/static/9713.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html
CVE ID: CVE-2002-1087 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/284229 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html
CVE ID: CVE-2002-1088 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:16.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0296.html - http://support.novell.com/servlet/tidfinder/2963273 - http://www.securityfocus.com/bid/5313 - http://www.iss.net/security_center/static/9671.php
CVE ID: CVE-2002-1089 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9628.php - http://www.securityfocus.com/bid/5262 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0203.html
CVE ID: CVE-2002-1090 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:12:16.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denial of service via long server responses. Additional Analyst Notes: - CVE Program Container: References: - http://www.stafford.uklinux.net/libesmtp/ChangeLog.txt
CVE ID: CVE-2002-1091 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-046.html - http://bugzilla.mozilla.org/show_bug.cgi?id=157989 - http://www.securityfocus.com/bid/5665 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075 - http://crash.ihug.co.nz/~Sneuro/zerogif/ - http://www.redhat.com/support/errata/RHSA-2002-1
sories?name=MDKSA-2002:075 - http://crash.ihug.co.nz/~Sneuro/zerogif/ - http://www.redhat.com/support/errata/RHSA-2002-192.html - http://marc.info/?l=bugtraq&m=103134051120770&w=2 - http://www.iss.net/security_center/static/10058.php
CVE ID: CVE-2002-1092 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/10017 - http://www.securityfocus.com/bid/5613
CVE ID: CVE-2002-1093 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denial of service (CPU consumption) via a long URL request. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - http://www.securityfocus.com/bid/5615 - http://www.iss.net/security_center/static/10018.php
CVE ID: CVE-2002-1094 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:12:17.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - http://www.iss.net/security_center/static/10020.php - http://www.securityfocus.com/bid/5624 - http://www.securityfocus.com/bid/5621 - http://www.securityfocus.com/bid/5623
CVE ID: CVE-2002-1095 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - http://www.securityfocus.com/bid/5625 - http://www.iss.net/security_center/static/10021.php
CVE ID: CVE-2002-1096 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - http://www.securityfocus.com/bid/5611 - http://www.iss.net/security_center/static/10019.php
CVE ID: CVE-2002-1097 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - http://www.securityfocus.com/bid/5612 - http://www.iss.net/security_center/static/10022.php
CVE ID: CVE-2002-1098 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.982Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - http://www.securityfocus.com/bid/5614 - http://www.iss.net/security_center/static/10023.php
CVE ID: CVE-2002-1099 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - http://www.securityfocus.com/bid/5616 - http://www.iss.net/security_center/static/10024.php
CVE ID: CVE-2002-1100 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:12:17.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - http://www.securityfocus.com/bid/5617 - http://www.iss.net/security_center/static/10025.php
CVE ID: CVE-2002-1101 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:12:17.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml
CVE ID: CVE-2002-1102 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to remove the previous connection. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/10027 - http://
com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/10027 - http://www.securityfocus.com/bid/5622
CVE ID: CVE-2002-1103 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:12:17.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml - http://www.kb.cert.org/vuls/id/761651
CVE ID: CVE-2002-1104 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service (crash) via TCP packets with source and destination ports of 137 (NETBIOS). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10042 - http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml - http://www.securityfocus.com/bid/5649
CVE ID: CVE-2002-1105 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the group password. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml - http://www.securityfocus.com/bid/5650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10044
CVE ID: CVE-2002-1106 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/10045 - http://www.securityfocus.com/bid/5652
CVE ID: CVE-2002-1107 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10046 - http://www.securityfocus.com/bid/5653 - http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml
CVE ID: CVE-2002-1108 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10047 - http://www.securityfocus.com/bid/5651 - http://www.cisco.com/warp/public/707/vpnclient-multiple2-vuln-pub.shtml
CVE ID: CVE-2002-1109 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service (CPU consumption) via a malformed TAR file, possibly via an incorrect file size parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=amavis-announce&m=103121272122242&w=2 - http://www.iss.net/security_center/static/10056.php - http://marc.info/?l=bugtraq&m=103124270321404&w=2
CVE ID: CVE-2002-1110 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:12:16.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to account_update.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9897.php - http://marc.info/?l=bugtraq&m=102978728718851&w=2 - http://www.securityfocus.com/bid/5510 - http://www.debian.org/security/2002/dsa-153 - http://mantisbt.sou
28718851&w=2 - http://www.securityfocus.com/bid/5510 - http://www.debian.org/security/2002/dsa-153 - http://mantisbt.sourceforge.net/advisories/2002/2002-01.txt
CVE ID: CVE-2002-1111 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-153 - http://marc.info/?l=bugtraq&m=102978873620491&w=2 - http://mantisbt.sourceforge.net/advisories/2002/2002-02.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/9898 - http://www.securityfocus.com/bid/5515
CVE ID: CVE-2002-1112 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-153 - http://marc.info/?l=bugtraq&m=102978673018271&w=2 - http://www.securityfocus.com/bid/5514 - http://mantisbt.sourceforge.net/advisories/2002/2002-03.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/9899
CVE ID: CVE-2002-1113 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the g_jpgraph_path parameter to reference the location of the PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-153 - http://www.securityfocus.com/bid/5504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9829 - http://www.osvdb.org/4858 - http://marc.info/?l=bugtraq&m=102978924821040&w=2 - http://marc.info/?l=bugtraq&m=102927873301965
//www.osvdb.org/4858 - http://marc.info/?l=bugtraq&m=102978924821040&w=2 - http://marc.info/?l=bugtraq&m=102927873301965&w=2
CVE ID: CVE-2002-1114 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:12:17.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters (1) g_bottom_include_page, (2) g_top_include_page, (3) g_css_include_file, (4) g_meta_include_file, or (5) a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102978711618648&w=2 - http://www.iss.net/security_center/static/9900.php - http://www.debian.org/security/2002/dsa-153 - http://www.securityfocus.com/bid/5509
CVE ID: CVE-2002-1115 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:12:17.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID parameter to (1) bug_update_advanced_page.php, (2) bug_update_page.php, (3) view_bug_advanced_page.php, or (4) view_bug_page.php. Additional Analyst Notes: - CVE Program Container: References: - http://mantisbt.sourceforge.net/advisories/2002/2002-06.txt - http://www.iss.net/security_center/static/9954.php - http://marc.info/?l=bugtraq&m=103013249211164&w=2 - http://www.securityfocus.com/bid/5563 - http://www.debian.org/securit
ttp://marc.info/?l=bugtraq&m=103013249211164&w=2 - http://www.securityfocus.com/bid/5563 - http://www.debian.org/security/2002/dsa-161
CVE ID: CVE-2002-1116 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9955 - http://marc.info/?l=bugtraq&m=103014152320112&w=2 - http://www.securityfocus.com/bid/5565
CVE ID: CVE-2002-1117 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103134395124579&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1036 - http://www.osvdb.org/8230 - http://marc.info/?l=bugtraq&m=103134930629683&w=2 - https://exchange.xforce.ibmcloud.com/vulnera
://www.osvdb.org/8230 - http://marc.info/?l=bugtraq&m=103134930629683&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10093 - http://seer.support.veritas.com/docs/238618.htm
CVE ID: CVE-2002-1118 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:16.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command. Additional Analyst Notes: - CVE Program Container: References: - http://otn.oracle.com/deploy/security/pdf/2002alert42rev1.pdf - http://www.iss.net/security_center/static/10283.php - http://www.securityfocus.com/bid/5678 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0017.html
CVE ID: CVE-2002-1119 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:12:17.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-045.0.txt - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-082.php - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000527 - http://www.redhat.com/support/errata/RHSA-2003-048.html - http://marc.info/?l=bugtraq&m=
lizacoes/?id=a&anuncio=000527 - http://www.redhat.com/support/errata/RHSA-2003-048.html - http://marc.info/?l=bugtraq&m=104333092200589&w=2 - http://www.redhat.com/support/errata/RHSA-2002-202.html - http://www.debian.org/security/2002/dsa-159 - http://www.securityfocus.com/bid/5581 - http://mail.python.org/pipermail/python-dev/2002-August/027229.html - http://www.iss.net/security_center/static/10009.php
CVE ID: CVE-2002-1120 State: PUBLISHED Published: 2002-09-12T04:00:00 Last Updated: 2024-08-08T03:12:16.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10076.php - http://www.securityfocus.com/bid/5686 - https://www.exploit-db.com/exploits/16770/ - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0112.html