Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-2087 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T22:13:59.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Borland InterBase 6.0 allows local users to execute arbitrary code via a long INTERBASE environment variable when calling (1) gds_drop, (2) gds_lock_mgr, or (3) gds_inet_server. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00222.html - http://www.securityfocus.com/bid/5046 - http://www.securityfocus.com/bid/5044 - http://www.iss.net/security_center/static/9392.php
CVE ID: CVE-2002-2088 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T19:20:55.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MOSIX Project clump/os 5.4 creates a default VNC account without a password, which allows remote attackers to gain root access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4581 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0327.html - http://www.iss.net/security_center/static/8928.php
CVE ID: CVE-2002-2089 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T18:59:04.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5085 - http://cert.uni-stuttgart.de/archive/vuln-dev/2002/06/msg00262.html - http://www.iss.net/security_center/static/9411.php
CVE ID: CVE-2002-2090 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T22:35:24.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote attackers to obtain server's root path via requests for MS-DOS device names such as lpt9.xtp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5252 - http://seclists.org/bugtraq/2002/Jul/0186.html
CVE ID: CVE-2002-2091 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T22:02:18.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Deception Finger Daemon, decfingerd, 0.7 may allow remote attackers to execute arbitrary code via the username of a finger request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5105 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0314.html - http://www.iss.net/security_center/static/9434.php
CVE ID: CVE-2002-2092 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.5.2 and earlier, and FreeBSD 4.4 and earlier allows local users to gain privileges by attaching a debugger to a process before the kernel has determined that the process is setuid or setgid. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:08.exec.asc - http://www.securityfocus.com/bid/3891 - http://www.osvdb.org/19475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7945 - ftp://ftp
yfocus.com/bid/3891 - http://www.osvdb.org/19475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7945 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-001.txt.asc
CVE ID: CVE-2002-2093 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3974 - ftp://patches.sgi.com/support/free/security/advisories/20020103-01-I - https://exchange.xforce.ibmcloud.com/vulnerabilities/8016
CVE ID: CVE-2002-2094 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T22:39:55.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3908 - http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html - http://www.iss.net/security_center/static/7930.php
CVE ID: CVE-2002-2095 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T16:48:55.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.webroot and (2) index.ipallow. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7931.php - http://www.securityfocus.com/bid/3909 - http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html
CVE ID: CVE-2002-2096 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T19:14:16.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Novell Remote Manager module, httpstk.nlm, in NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary code via a long (1) username or (2) password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4405 - http://archives.neohapsis.com/archives/bugtraq/2002-04/0088.html - http://www.iss.net/security_center/static/8736.php - http://archives.neohapsis.com/archives/bugtraq/2002-04/0001.html - http://support.novell.com/servlet/tidfinder/2962026
CVE ID: CVE-2002-2097 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: The compression code in MaraDNS before 0.9.01 allows remote attackers to cause a denial of service via crafted DNS packets. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1003252 - http://www.securityfocus.com/bid/3852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7972
CVE ID: CVE-2002-2098 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in axspawn.c in Axspawn-pam before 0.2.1a allows remote attackers to execute arbitrary code via large packets. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7974 - http://www.dabo.de/software/axspawn.html - http://www.securityfocus.com/bid/3824 - http://securitytracker.com/id?1003242
CVE ID: CVE-2002-2099 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 allows local users to execute arbitrary code and possibly gain privileges via a long HOME environment variable. NOTE: since DDD is not installed setuid or setgid, perhaps this issue should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7979 - http://securitytracker.com/id?1003241
CVE ID: CVE-2002-2100 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T20:26:47.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4334 - http://www.iss.net/security_center/static/8611.php - http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html
CVE ID: CVE-2002-2101 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-17T03:43:58.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8613.php - http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html - http://www.securityfocus.com/bid/4337
CVE ID: CVE-2002-2102 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-17T02:47:07.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8627.php - http://www.securityfocus.com/bid/4359 - http://www.jcraft.com/jzlib/ChangeLog
CVE ID: CVE-2002-2103 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-17T03:29:00.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache before 1.3.24, when writing to the log file, records a spoofed hostname from the reverse lookup of an IP address, even when a double-reverse lookup fails, which allows remote attackers to hide the original source of activities. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8629.php - http://www.apache.org/dist/httpd/CHANGES_1.3 - http://www.securityfocus.com/bid/4358
CVE ID: CVE-2002-2104 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: graph.php in Ganglia PHP RRD Web Client 1.0.2 allows remote attackers to execute arbitrary commands via the command parameter, which is provided to the passthru function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7999 - http://www.securityfocus.com/bid/3962 - http://securitytracker.com/id?1003376
CVE ID: CVE-2002-2105 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP allows local users to prevent the system from booting via a corrupt explorer.exe.manifest file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8000 - http://securitytracker.com/id?1003308 - http://www.supernature-forum.de/vbb/printthread.php?threadid=6458 - http://www.securityfocus.com/bid/3942
CVE ID: CVE-2002-2106 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3946 - http://securitytracker.com/id?1003307 - http://sourceforge.net/mailarchive/message.php?msg_id=185752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8001
CVE ID: CVE-2002-2107 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T20:36:58.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the lookup script in Veridis OpenKeyServer (OKS) 1.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8651.php - http://www.securityfocus.com/bid/4369 - http://www.securiteam.com/securitynews/5BP0R1P6KE.html
CVE ID: CVE-2002-2108 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T16:38:50.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the "VAIO Manual" software in certain Sony VAIO personal computers sold from November 2001 to January 2002, allows remote attackers to modify data via a web page or HTML e-mail. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8009.php - http://www.securityfocus.com/bid/3959 - http://vaio-online.sony.com/announcement/technical_explain.html - http://vaio-online.sony.com/announcement/announcement_content.html
CVE ID: CVE-2002-2109 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-17T03:28:32.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3954 - http://www.iss.net/security_center/static/8012.php - http://worldwidemart.com/script
://www.securityfocus.com/bid/3954 - http://www.iss.net/security_center/static/8012.php - http://worldwidemart.com/scripts/formmail.shtml - http://archives.neohapsis.com/archives/bugtraq/2002-01/0307.html
CVE ID: CVE-2002-2110 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T18:49:37.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset) by connecting to port 80 on the 10.0.0.0/8 device. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8661.php - http://archives.neohapsis.com/archives/bugtraq/2002-03/0335.html - http://www.securityfocus.com/bid/4375
CVE ID: CVE-2002-2111 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fwmon before 1.0.10 allows remote attackers to cause a denial of service (crash) by causing the kernel to return a large packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.scaramanga.co.uk/fwmon/fwmon-1.0.10.tar.gz - http://www.securityfocus.com/bid/3984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8104
CVE ID: CVE-2002-2112 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T18:08:11.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8662.php - http://archives.neohapsis.com/archives/bugtraq/2002-03/0335.html - http://www.securityfocus.com/bid/4377 - http://archives.neohapsis.com/archives
.com/archives/bugtraq/2002-03/0335.html - http://www.securityfocus.com/bid/4377 - http://archives.neohapsis.com/archives/bugtraq/2002-03/0336.html
CVE ID: CVE-2002-2113 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-17T00:40:41.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: search.cgi in AGH HTMLsearch 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/securitynews/5WP0R2K60O.html - http://www.securityfocus.com/bid/3985 - http://www.iss.net/security_center/static/8032.php
CVE ID: CVE-2002-2114 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Artekopia Netjuke before 1.0 b7 allows remote attackers to execute arbitrary code on the web server, possibly via the section parameter, which is passed to an eval call. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8101 - http://sourceforge.net/tracker/index.php?func=detail&aid=507312&group_id=42076&atid=432052
CVE ID: CVE-2002-2115 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-17T04:04:41.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hyper NIKKI System (HNS) Lite before 0.9 and HNS before 2.10-pl2 allows remote attackers to inject arbitrary web script or HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.h14m.org/SA/2002/hns-SA-2002-01.txt - http://www.securityfocus.com/bid/4102 - http://www.iss.net/security_center/static/8204.php
CVE ID: CVE-2002-2116 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T16:42:48.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear RM-356 and RT-338 series SOHO routers allow remote attackers to cause a denial of service (crash) via a UDP port scan, as demonstrated using nmap. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-02/0183.html - http://www.securityfocus.com/bid/4111 - http://www.iss.net/security_center/static/8206.php - http://archives.neohapsis.com/archives/bugtraq/2002-02/0162.html
CVE ID: CVE-2002-2117 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-17T02:11:59.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP allows remote attackers to cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP). Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8207.php - http://www.safehack.com/Advisory/sh_XPDOS500.txt
CVE ID: CVE-2002-2118 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Blue World Lasso Web Data Engine 3.6.5 allows remote attackers to cause a denial of service via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4110 - http://marc.info/?l=vuln-dev&m=101372618504099&w=2 - http://www.securiteam.com/windowsntfocus/5NP0B2A6AQ.html - http://www.iss.net/security_center/static/8208.php
CVE ID: CVE-2002-2119 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T16:27:39.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell eDirectory 8.6.2 and 8.7 use case insensitive passwords, which makes it easier for remote attackers to conduct brute force password guessing. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-05/0273.html - http://www.iss.net/security_center/static/9229.php - http://www.securityfocus.com/bid/4893
CVE ID: CVE-2002-2120 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-17T04:20:21.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in QNX RTOS 4.25 may allow attackers to execute arbitrary code via long filename arguments to (1) Watcom or (2) int10. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4906 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html - http://www.iss.net/security_center/static/9236.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0293.html - http://www.securityfocus.com/bid/4905 - http://www.iss.net/security_center/static/9235.php
CVE ID: CVE-2002-2121 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T03:51:17.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: SurfControl SuperScout Email filter for SMTP 3.5.1 allows remote attackers to cause a denial of service (crash) via a long SMTP (1) HELO or (2) RCPT TO command, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=vuln-dev&m=101569966118410&w=2 - http://www.iss.net/security_center/static/8424.php - http://www.securityfocus.com/bid/4257
CVE ID: CVE-2002-2122 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T21:02:29.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9021.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0035.html - http://www.securityfocus.com/bid/4681
CVE ID: CVE-2002-2123 State: PUBLISHED Published: 2005-08-16T04:00:00 Last Updated: 2024-08-08T03:51:17.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in publish_xp_docs.php for Gallery 1.3.2 allows remote attackers to inject arbitrary PHP code by specifying a URL to an init.php file in the GALLERY_BASEDIR parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10943 - http://www.securityfocus.com/archive/1/304611 - http://www.securityfocus.com/bid/6489
CVE ID: CVE-2002-2124 State: PUBLISHED Published: 2005-10-27T04:00:00 Last Updated: 2024-08-08T03:51:17.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: The recvn and sendn functions in nylon 0.2 do not check when the recv function call returns 0, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) by closing the connection while recv is executing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10334 - http://www.security-express.com/archives/bugtraq/2002-10/0146.html - http://secunia.com/advisories/7281
CVE ID: CVE-2002-2125 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-17T03:42:55.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.0 does not warn users when an expired certificate authority (CA) certificate is submitted to the user and a newer CA certificate is in the user's local repository, which could allow remote attackers to decrypt web sessions via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10180.php - http://www.securityfocus.com/bid/5778 - http://www.securityfocus.com/archive/1/292842
CVE ID: CVE-2002-2126 State: PUBLISHED Published: 2005-11-16T07:37:00Z Last Updated: 2024-09-17T03:02:48.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0021.html - http://www.iss.net/security_center/static/10745.php - http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0087.html - http://www.securityfocus.com/bid/6295