Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0844 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc - http://www.redhat.com/support/errata/RHSA-2004-004.html - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-035.0.txt - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0081.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/9175 - http://ww
ohapsis.com/archives/vulnwatch/2002-q2/0081.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/9175 - http://www.securityfocus.com/bid/4829 - http://marc.info/?l=bugtraq&m=102233767925177&w=2
CVE ID: CVE-2002-0845 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.sun.com/service/support/software/iplanet/alerts/transferencodingalert-23july2002.html - http://www.iss.net/security_center/static/9799.php - http://www.securityfocus.com/bid/5433 - http://marc.info/?l=bugtraq&m=102890933623192&w=2
CVE ID: CVE-2002-0846 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-027.html - http://www.securityfocus.com/bid/5430 - http://marc.info/?l=bugtraq&m=103072708329280&w=2 - http://www.redhat.com/support/errata/RHSA-2003-026.html - http://www.macromedia.com/v1/handlers/index.cfm?ID=23293 - http://www.iss.net/security_c
ort/errata/RHSA-2003-026.html - http://www.macromedia.com/v1/handlers/index.cfm?ID=23293 - http://www.iss.net/security_center/static/9798.php
CVE ID: CVE-2002-0847 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free). Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2002/dsa-145 - http://www.iss.net/security_center/static/9079.php - http://sourceforge.net/project/shownotes.php?release_id=88790 - http://www.securityfocus.com/bid/4731
CVE ID: CVE-2002-0848 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn5k-radius-pap-vuln-pub.shtml - http://www.iss.net/security_center/static/9781.php - http://www.se
com/warp/public/707/vpn5k-radius-pap-vuln-pub.shtml - http://www.iss.net/security_center/static/9781.php - http://www.securityfocus.com/bid/5417
CVE ID: CVE-2002-0849 State: PUBLISHED Published: 2002-08-10T04:00:00 Last Updated: 2024-08-08T03:03:49.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102882056105806&w=2 - http://www.iss.net/security_center/static/9792.php - http://marc.info/?l=bugtraq&m=102891036424424&w=2 - http://www.securityfocus.com/bid/5423
CVE ID: CVE-2002-0850 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5656 - http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1.1/pgphotfix_outlookplugin711/ReadMe.txt - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0106.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10043 - ht
ves.neohapsis.com/archives/vulnwatch/2002-q3/0106.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10043 - http://marc.info/?l=bugtraq&m=103133995920090&w=2
CVE ID: CVE-2002-0851 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9811.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html - http://www.securityfocus.com/bid/5437
CVE ID: CVE-2002-0852 State: PUBLISHED Published: 2002-08-14T04:00:00 Last Updated: 2024-08-08T03:03:49.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid payloads. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtml
CVE ID: CVE-2002-0853 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtml - http://www.kb.cert.org/vuls/id/287771 - http://www.securityfocus.com/bid/5440 - http://www.iss.net/security_center/static/9821.php
CVE ID: CVE-2002-0854 State: PUBLISHED Published: 2002-08-14T04:00:00 Last Updated: 2024-08-08T03:03:49.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://lists.opensuse.org/opensuse-security-announce/2002-08/msg00006.html
CVE ID: CVE-2002-0855 State: PUBLISHED Published: 2002-08-14T04:00:00 Last Updated: 2024-08-08T03:03:48.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0268.html - http://mail.python.org/pipermail/mailman-announce/2002-July/000043.html - http://www.redhat.com/support/errata/RHSA-2002-177.html - http://www.redhat.com/support/errata/RHS
02-July/000043.html - http://www.redhat.com/support/errata/RHSA-2002-177.html - http://www.redhat.com/support/errata/RHSA-2002-178.html - http://www.debian.org/security/2002/dsa-147 - http://www.securityfocus.com/bid/5298 - http://www.redhat.com/support/errata/RHSA-2002-181.html - http://www.redhat.com/support/errata/RHSA-2002-176.html - http://www.iss.net/security_center/static/9985.php - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000522
CVE ID: CVE-2002-0856 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0072.html - http://otn.oracle.com/deploy/security/pdf/2002alert38rev1.pdf - http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20941 - http://www.iss.net/security_center/static/9237.php - http://w
.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20941 - http://www.iss.net/security_center/static/9237.php - http://www.securityfocus.com/bid/5457
CVE ID: CVE-2002-0857 State: PUBLISHED Published: 2002-08-20T04:00:00 Last Updated: 2024-08-08T03:03:49.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file. Additional Analyst Notes: - CVE Program Container: References: - http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf - http://www.kb.cert.org/vuls/id/301059 - http://securitytracker.com/id?1005037 - http://www.securityfocus.com/bid/5460 - http://
www.kb.cert.org/vuls/id/301059 - http://securitytracker.com/id?1005037 - http://www.securityfocus.com/bid/5460 - http://marc.info/?l=bugtraq&m=102933735716634&w=2 - http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt
CVE ID: CVE-2002-0858 State: PUBLISHED Published: 2002-08-20T04:00:00 Last Updated: 2024-08-08T03:03:49.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102918005402808&w=2 - http://www.iss.net/security_center/static/9932.php - http://www.osvdb.org/9476
CVE ID: CVE-2002-0859 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102450188620081&w=2 - http://www.iss.net/security_center/static/9375.php - http://www.securityfocus.com/bid/5057 - http://www.nextgenss.com/advisories/mssql-ods.txt - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010
CVE ID: CVE-2002-0860 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044 - http://www.iss.net/security_center/static/8778.php - http://www.osvdb.org/3007 - http://marc.info/?l=bugtraq&m=101829911018463&w=2 - http://www.securityfocus.co
c/8778.php - http://www.osvdb.org/3007 - http://marc.info/?l=bugtraq&m=101829911018463&w=2 - http://www.securityfocus.com/bid/4453
CVE ID: CVE-2002-0861 State: PUBLISHED Published: 2002-08-23T04:00:00 Last Updated: 2024-08-08T03:03:48.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8779.php - http://marc.info/?l=bugtraq&m=101829726516346&w=2 - http://www.securityfocus.com/bid/4457 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/
&w=2 - http://www.securityfocus.com/bid/4457 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044
CVE ID: CVE-2002-0862 State: PUBLISHED Published: 2002-09-10T04:00:00 Last Updated: 2024-08-08T03:03:49.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS. Additio
ted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1332 - http://marc.info/?l=bugtraq&m=102918200405308&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1056 - http://marc.info/?l=bugtraq&m=102866120821995&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9776 - http://marc.info/?l=bugtraq&m=102976967730450&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2671 - https://docs.microsoft.c
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2671 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050
CVE ID: CVE-2002-0863 State: PUBLISHED Published: 2002-10-01T04:00:00 Last Updated: 2024-08-08T03:03:49.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5711 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051 - http://www.iss.net/security_center/static/10122.php - htt
t.com/en-us/security-updates/securitybulletins/2002/ms02-051 - http://www.iss.net/security_center/static/10122.php - http://www.kb.cert.org/vuls/id/865833 - http://marc.info/?l=bugtraq&m=103235960119404&w=2 - http://www.securityfocus.com/bid/5712 - http://marc.info/?l=bugtraq&m=103236181522253&w=2 - http://www.iss.net/security_center/static/10121.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A199
CVE ID: CVE-2002-0864 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka "Denial of Service in Remote Desktop." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051 - http://marc.info/?l=bugtraq&m=103236181522253&w=2 - http://marc.info/?l=bugtraq&m=103235745116592&w=2
ns/2002/ms02-051 - http://marc.info/?l=bugtraq&m=103236181522253&w=2 - http://marc.info/?l=bugtraq&m=103235745116592&w=2 - http://www.iss.net/security_center/static/10120.php - http://www.securityfocus.com/bid/5713
CVE ID: CVE-2002-0865 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes." Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10135.php - http://www.securityfocus.com/bid/5752 - https://docs.microsoft.com/en-us/security-updates/securitybu
/static/10135.php - http://www.securityfocus.com/bid/5752 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 - http://www.kb.cert.org/vuls/id/140898
CVE ID: CVE-2002-0866 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes." Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10133.php - http://www.kb.cert.org/vuls/id/307306 - https://docs.microsoft.com/en-us
/www.iss.net/security_center/static/10133.php - http://www.kb.cert.org/vuls/id/307306 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 - http://www.securityfocus.com/bid/5751 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0271.html
CVE ID: CVE-2002-0867 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:03:49.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw." Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10134.php - http://www.kb.cert.org/vuls/id/792881 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 - http://www.securityfocus.com/bid/5750
CVE ID: CVE-2002-0869 State: PUBLISHED Published: 2002-11-02T05:00:00 Last Updated: 2024-08-08T03:03:49.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%
val%3Aorg.mitre.oval%3Adef%3A983 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A929 - http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt - http://marc.info/?l=bugtraq&m=103642839205574&w=2 - http://www.iss.net/security_center/static/10502.php - http://www.ciac.org/ciac/bulletins/n-011.shtml - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A930 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html
CVE ID: CVE-2002-0870 State: PUBLISHED Published: 2002-08-20T04:00:00 Last Updated: 2024-08-08T03:03:49.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface, possibly via a variant of the original attack, as identified by Cisco bug ID CSCdw08549. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml
CVE ID: CVE-2002-0871 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2002/dsa-151 - http://marc.info/?l=bugtraq&m=102935383506155&w=2 - http://www.redhat.com/support/errata/RHSA-2002-196.html - http://www.redhat.com/support/errata/RHSA-2003-228.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-053.php - http://www.
.com/support/errata/RHSA-2003-228.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-053.php - http://www.securityfocus.com/bid/5458 - http://www.iss.net/security_center/static/9844.php
CVE ID: CVE-2002-0872 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-152 - http://www.iss.net/security_center/static/9845.php - http://www.securityfocus.com/bid/5451
CVE ID: CVE-2002-0873 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-152 - http://www.iss.net/security_center/static/10460.php
CVE ID: CVE-2002-0874 State: PUBLISHED Published: 2002-08-20T04:00:00 Last Updated: 2024-08-08T03:03:49.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-150