Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1183 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9776 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050 - http://www.securityfocus.com/bid/5410 - https://oval.cisecurity.org/repos
rity-updates/securitybulletins/2002/ms02-050 - http://www.securityfocus.com/bid/5410 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2108 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1455 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1059
CVE ID: CVE-2002-1184 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan horse programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5415 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-064 - https://exchange.xforce.ibmclou
15 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-064 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9779
CVE ID: CVE-2002-1185 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 - http://www.securityfocus.com/bid/6216 - http://www.eeye.com/html/Research/A
ty-updates/securitybulletins/2002/ms02-066 - http://www.securityfocus.com/bid/6216 - http://www.eeye.com/html/Research/Advisories/AD20021211.html - http://marc.info/?l=bugtraq&m=103970996205091&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A542 - http://www.iss.net/security_center/static/10662.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0105.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A393
CVE ID: CVE-2002-1186 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 - http://www.securityfocus.com/bid/5610 - http://archives.neoh
om/en-us/security-updates/securitybulletins/2002/ms02-066 - http://www.securityfocus.com/bid/5610 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0018.html - http://www.iss.net/security_center/static/10039.php - http://www.osvdb.org/7845 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A495 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0030.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A471 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A143
CVE ID: CVE-2002-1187 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the <frame> or <iframe> element and javascript, aka "Frames Cross Site Scripting," as demonstrated using the PrivacyPolicy.dlg resource. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 - http://www.securityfocus.com/bid/5672 - http://marc.info/?l=bugtraq&m=1031586
-updates/securitybulletins/2002/ms02-066 - http://www.securityfocus.com/bid/5672 - http://marc.info/?l=bugtraq&m=103158601431054&w=2 - http://www.osvdb.org/2998 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A203 - http://www.iss.net/security_center/static/10066.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A225
CVE ID: CVE-2002-1188 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user information such as cookies via certain uses of the OBJECT tag, which are not subjected to the proper security checks, aka "Temporary Internet Files folders Name Reading." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066 - http://www.ciac.org/ciac/bulletins/n-018.shtml - http://www.securityfocus.co
y-updates/securitybulletins/2002/ms02-066 - http://www.ciac.org/ciac/bulletins/n-018.shtml - http://www.securityfocus.com/bid/6217 - http://www.iss.net/security_center/static/10665.php - http://marc.info/?l=bugtraq&m=103184415307193&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A690 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A444
CVE ID: CVE-2002-1189 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10282.php - http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml - http://www.securityfocus.com/bid/5896
CVE ID: CVE-2002-1190 State: PUBLISHED Published: 2002-10-15T04:00:00 Last Updated: 2024-08-08T03:19:27.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44545 - http://www.iss.net/security_center/static/10282.php - http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml
CVE ID: CVE-2002-1191 State: PUBLISHED Published: 2002-10-21T04:00:00 Last Updated: 2024-08-08T03:19:27.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5974 - http://marc.info/?l=bugtraq&m=103478372603106&w=2 - http://www.iss.net/security_center/static/10378.php - http://www.osvdb.org/6555 - http://www.idefense.com/advisory/10.16.02.txt - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=48
CVE ID: CVE-2002-1192 State: PUBLISHED Published: 2002-10-15T04:00:00 Last Updated: 2024-08-08T03:19:27.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5837 - http://secunia.com/advisories/7181 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-021.txt.asc - http://marc.info/?l=bugtraq&m=103342413220529&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
002-021.txt.asc - http://marc.info/?l=bugtraq&m=103342413220529&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10261 - http://secunia.com/advisories/7252 - http://www.osvdb.org/6098
CVE ID: CVE-2002-1193 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-172 - http://www.securityfocus.com/bid/5911 - http://www.iss.net/security_center/static/10307.php
CVE ID: CVE-2002-1194 State: PUBLISHED Published: 2002-10-15T04:00:00 Last Updated: 2024-08-08T03:19:28.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10303.php - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-019.txt.asc - http://www.securityfocus.com/bid/5910
CVE ID: CVE-2002-1195 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability (XSS) in the PHP interface for ht://Check 1.1 allows remote web servers to insert arbitrary HTML, including script, via a web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-169 - http://marc.info/?l=bugtraq&m=103184269605160&w=2 - http://www.securityfocus.com/bid/5699 - http://www.iss.net/security_center/static/10089.php
CVE ID: CVE-2002-1196 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set multiple bits. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5843 - http://www.debian.org/security/2002/dsa-173 - http://www.iss.net/security_center/static/10233.php - http://bugzill
843 - http://www.debian.org/security/2002/dsa-173 - http://www.iss.net/security_center/static/10233.php - http://bugzilla.mozilla.org/show_bug.cgi?id=167485#c12 - http://marc.info/?l=bugtraq&m=103349804226566&w=2
CVE ID: CVE-2002-1197 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10234.php - http://www.securityfocus.com/bid/5844 - http://bugzilla.mozilla.org/show_bug.cgi?id=163024 - http://marc.info/?l=bugtraq&m=103349804226566&w=2
CVE ID: CVE-2002-1198 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10235.php - http://bugzilla.mozilla.org/show_bug.cgi?id=165221 - http://www.securityfocus.com/bid/5842 - http://marc.info/?l=bugtraq&m=103349804226566&w=2
CVE ID: CVE-2002-1199 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903 - http://marc.info/?l=bugtraq&m=103426842025029&w=2 - ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40 - http://www.iss.net/security_center/static/10329.php - http://www.kb.cert.org/v
pub/updates/OpenServer/CSSA-2002-SCO.40 - http://www.iss.net/security_center/static/10329.php - http://www.kb.cert.org/vuls/id/538033 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2423 - http://www.securityfocus.com/bid/5937
CVE ID: CVE-2002-1200 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:27.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.balabit.hu/static/zsa/ZSA-2002-014-en.txt - http://www.securityfocus.com/bid/5934 - http://www.linuxsecurity.com/advisories/other_advisory-2513.h
-2002-014-en.txt - http://www.securityfocus.com/bid/5934 - http://www.linuxsecurity.com/advisories/other_advisory-2513.html - http://www.iss.net/security_center/static/10339.php - http://www.novell.com/linux/security/advisories/2002_039_syslog_ng.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000547 - http://marc.info/?l=bugtraq&m=103426595021928&w=2 - http://www.debian.org/security/2002/dsa-175
CVE ID: CVE-2002-1201 State: PUBLISHED Published: 2002-10-15T04:00:00 Last Updated: 2024-08-08T03:19:27.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10326.php - http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en - http://marc.info/?l=bugtraq&m=103418410408599&w=2 - http://www.kb.cert.org/vu
IY31641&loc=en_US&cs=utf-8&cc=us&lang=en - http://marc.info/?l=bugtraq&m=103418410408599&w=2 - http://www.kb.cert.org/vuls/id/102345 - http://www.securityfocus.com/bid/5925
CVE ID: CVE-2002-1202 State: PUBLISHED Published: 2002-10-15T04:00:00 Last Updated: 2024-08-08T03:19:28.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/tru64/2002-q4/0002.html - http://www.iss.net/security_center/static/10316.php - http://www.securityfocus.com/bid/5913
CVE ID: CVE-2002-1203 State: PUBLISHED Published: 2002-10-15T04:00:00 Last Updated: 2024-08-08T03:19:28.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103417988503398&w=2 - http://www.securityfocus.com/bid/5924 - http://www.iss.net/security_center/static/10249.php
CVE ID: CVE-2002-1204 State: PUBLISHED Published: 2002-11-21T05:00:00 Last Updated: 2024-08-08T03:19:28.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the user_pref() function and accessing the prefs.js file, which is stored in a directory with a predictable name. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0081.html - http://www.idefense.com/advisory/11.19.02c.txt - http://www.iss.net
neohapsis.com/archives/vulnwatch/2002-q4/0081.html - http://www.idefense.com/advisory/11.19.02c.txt - http://www.iss.net/security_center/static/10655.php - http://www.securityfocus.com/bid/6215
CVE ID: CVE-2002-1209 State: PUBLISHED Published: 2002-10-29T05:00:00 Last Updated: 2024-08-08T03:19:28.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10469 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html - http://www.securityfocus.com/bid/6045 - http://www.idefense.com/advisory/10.24.02.txt
CVE ID: CVE-2002-1210 State: PUBLISHED Published: 2002-11-21T05:00:00 Last Updated: 2024-08-08T03:19:28.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment with malicious script into a frame, which then executes the script in the local browser context. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/advisory/11.19.02b.txt - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html
CVE ID: CVE-2002-1211 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE that points to code stored on a remote server, which is then used in (1) index.php, (2) install.php, or (3) various test_*.php scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/advisory/10.31.02b.txt - http://www.iss.net/security_center/static/10515.php - http://marc.info/?l=bugtraq&m=103616306403031&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4
10515.php - http://marc.info/?l=bugtraq&m=103616306403031&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0050.html - http://www.securityfocus.com/bid/6087
CVE ID: CVE-2002-1212 State: PUBLISHED Published: 2002-10-21T04:00:00 Last Updated: 2024-08-08T03:19:28.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5967 - http://www.iss.net/security_center/static/10372.php - http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true
CVE ID: CVE-2002-1213 State: PUBLISHED Published: 2002-10-21T04:00:00 Last Updated: 2024-08-08T03:19:27.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." (dot-dot) sequences containing URL-encoded forward slash ("%2F") characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10373.php - http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true - http://www.securityfocus.com/bid/5968
CVE ID: CVE-2002-1214 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5807 - http://www.iss.net/security_center/static/10199.php - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-063 - http://online.securityfocus.com/archive/1/293146
CVE ID: CVE-2002-1215 State: PUBLISHED Published: 2002-10-21T04:00:00 Last Updated: 2024-08-08T03:19:28.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources). Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000540 - http://www.novell.com/linux/security/advisories/2002_037_heartbeat.html - http://www.debian.org/security/2002/dsa-174 - http://www.iss.net/security_cente
ity/advisories/2002_037_heartbeat.html - http://www.debian.org/security/2002/dsa-174 - http://www.iss.net/security_center/static/10357.php - http://www.securityfocus.com/bid/5955 - http://linux-ha.org/security/sec01.txt
CVE ID: CVE-2002-1216 State: PUBLISHED Published: 2002-10-21T04:00:00 Last Updated: 2024-08-08T03:19:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-096.html - http://marc.info/?l=bugtraq&m=103419290219680&w=2 - http://www.iss.net/security_center/static/10224.php - http://www.mandriva.com/security/advisories?name=MDKSA-2006:219 - http://www.openpkg.com/security/ad
/static/10224.php - http://www.mandriva.com/security/advisories?name=MDKSA-2006:219 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html