Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1321 State: PUBLISHED Published: 2002-11-27T05:00:00 Last Updated: 2024-08-08T03:19:28.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain "Now Playing" options on a downloaded file with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://service.real.com/help/faq/security/bufferoverrun_player.html - http://www.securityfocus.com/bid/6229 - http://marc.info
/service.real.com/help/faq/security/bufferoverrun_player.html - http://www.securityfocus.com/bid/6229 - http://marc.info/?l=bugtraq&m=103808645120764&w=2 - http://www.securityfocus.com/bid/6227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10677
CVE ID: CVE-2002-1322 State: PUBLISHED Published: 2002-11-27T05:00:00 Last Updated: 2024-08-08T03:19:28.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g. via nmap. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103808239618238&w=2 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0084.html - http://www.securityfocus.com/bid/6228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10675
CVE ID: CVE-2002-1323 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-256.html - http://marc.info/?l=bugtraq&m=104040175522502&w=2 - http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.1/SCOSA-2004.1.tx
use.perl.org/articles/02/10/06/1118222.shtml?tid=5 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.1/SCOSA-2004.1.txt - http://www.redhat.com/support/errata/RHSA-2003-257.html - http://marc.info/?l=bugtraq&m=104033126305252&w=2 - ftp://patches.sgi.com/support/free/security/advisories/20030606-01-A - http://marc.info/?l=bugtraq&m=104005919814869&w=2 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-007.0.txt - http://www.iss.net/security_center/static/10574.php - http://www.osvdb.org/3814 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1160 - http://www.osvdb.org/2183 - http://www.debian.org/security/2002/dsa-208 - http://www.securityfocus.c
oval%3Adef%3A1160 - http://www.osvdb.org/2183 - http://www.debian.org/security/2002/dsa-208 - http://www.securityfocus.com/bid/6111 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0061.html - http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744
CVE ID: CVE-2002-1325 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069 - http://www.securityfocus.com/bid/6380
CVE ID: CVE-2002-1327 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a corrupt custom attribute, aka "Unchecked Buffer in Windows Shell Could Enable System Compromise." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/591890 - http://marc.info/?l=bugtraq&m=104025849109384&w=2 - http://www.securityfocus.com/bid/6427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10892 - http://www.cert.or
http://www.securityfocus.com/bid/6427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10892 - http://www.cert.org/advisories/CA-2002-37.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-072
CVE ID: CVE-2002-1334 State: PUBLISHED Published: 2002-12-03T05:00:00 Last Updated: 2024-08-08T03:19:28.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10718 - http://securitytracker.com/id?1005681 - http://marc.info/?l=bugtraq&m=103842773205148&w=2 - http://www.securityfocus.com/bid/6265
CVE ID: CVE-2002-1335 State: PUBLISHED Published: 2002-12-03T05:00:00 Last Updated: 2024-08-08T03:19:28.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-045.html - http://www.securityfocus.com/bid/6793 - http://secunia.com/advisories/8031 - http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200211.month/838.html - http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.009.html -
.ac.jp/~satodai/w3m-dev-en/200211.month/838.html - http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.009.html - http://secunia.com/advisories/8015 - http://secunia.com/advisories/8016 - http://www.osvdb.org/6981 - http://www.debian.org/security/2003/dsa-251 - http://www.redhat.com/support/errata/RHSA-2003-044.html - http://secunia.com/advisories/8053 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10842 - http://www.debian.org/security/2003/dsa-249 - http://sourceforge.net/project/shownotes.php?release_id=124484 - http://www.debian.org/security/2003/dsa-250
CVE ID: CVE-2002-1336 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/5992 - http://www.redhat.com/support/errata/RHSA-2002-287.html - http://marc.info/?l=bugtraq&m=102753170201524&w=2 - http://www.redhat.com/support/errata/RHSA-2003-041.html - http://www.mandrakesoft.com/security/advi
02753170201524&w=2 - http://www.redhat.com/support/errata/RHSA-2003-041.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640 - http://www.tightvnc.com/WhatsNew.txt - http://marc.info/?l=bugtraq&m=102769183913594&w=2 - http://www.securityfocus.com/bid/5296
CVE ID: CVE-2002-1337 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-073.html - ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P - http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only - http://marc.info/?l=bugtraq&m=104678862
030301-01-P - http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only - http://marc.info/?l=bugtraq&m=104678862109841&w=2 - http://www.redhat.com/support/errata/RHSA-2003-227.html - http://www.securityfocus.com/bid/6991 - http://www.kb.cert.org/vuls/id/398025 - http://www.sendmail.org/8.12.8.html - http://www.debian.org/security/2003/dsa-257 - http://marc.info/?l=bugtraq&m=104678739608479&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222 - http://www.redhat.com/support/errata/RHSA-2003-074.html - http://www.cert.org/advisories/CA-2003-07.html - http://marc.info/?l=bugtraq&m=104673778105192&w=2 - http://frontal2.mandriva.com/security/ad
dvisories/CA-2003-07.html - http://marc.info/?l=bugtraq&m=104673778105192&w=2 - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only - http://www.iss.net/security_center/static/10748.php - ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6 - ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc - http://marc.info/?l=bugtraq&m=104679411316818&w=2 - http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950 - http://www-1.ibm.com/support/search.wss?rs=0
&w=2 - http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only - http://marc.info/?l=bugtraq&m=104678862409849&w=2
CVE ID: CVE-2002-1338 State: PUBLISHED Published: 2002-12-11T05:00:00 Last Updated: 2024-08-08T03:19:28.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files. Additional Analyst Notes: - CVE Program Container: References: - http://security.greymagic.com/adv/gm008-ie/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/8784 - http://www.kb.cert.org/vuls/id/156123 - http://marc.info/?l=bugtraq&m=101830175621193&w=2 - http://www.securityfocus.com/bid/4454
CVE ID: CVE-2002-1339 State: PUBLISHED Published: 2002-12-11T05:00:00 Last Updated: 2024-08-08T03:19:28.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files. Additional Analyst Notes: - CVE Program Container: References: - http://security.greymagic.com/adv/gm008-ie/ - http://marc.info/?l=bugtraq&m=101830175621193&w=2
CVE ID: CVE-2002-1340 State: PUBLISHED Published: 2002-12-11T05:00:00 Last Updated: 2024-08-08T03:19:28.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception. Additional Analyst Notes: - CVE Program Container: References: - http://security.greymagic.com/adv/gm008-ie/ - http://marc.info/?l=bugtraq&m=101830175621193&w=2
CVE ID: CVE-2002-1341 State: PUBLISHED Published: 2002-12-11T05:00:00 Last Updated: 2024-08-08T03:19:28.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=104004924002662&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10754 - http://www.securityfocus.com/bid/6302 - http://marc.info/?l=bugtraq&m=103893844126484&w=2 - http://marc.info/?l=bugtraq&m=103911130503272&w=2 - http://w
/6302 - http://marc.info/?l=bugtraq&m=103893844126484&w=2 - http://marc.info/?l=bugtraq&m=103911130503272&w=2 - http://www.debian.org/security/2002/dsa-220 - http://secunia.com/advisories/8220 - http://f0kp.iplus.ru/bz/008.txt - http://www.redhat.com/support/errata/RHSA-2003-042.html
CVE ID: CVE-2002-1342 State: PUBLISHED Published: 2002-12-11T05:00:00 Last Updated: 2024-08-08T03:19:28.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10768.php - http://www.debian.org/security/2002/dsa-203 - http://www.securityfocus.com/bid/6313
CVE ID: CVE-2002-1344 State: PUBLISHED Published: 2002-12-11T05:00:00 Last Updated: 2024-08-08T03:19:28.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000552 - ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt - https://www.debian.org/security/2002/dsa-209 - http://marc.info/?l=bugtraq&m=104033016703851&w=2 - http://www.ciac.org/ciac/bulletins/n
ian.org/security/2002/dsa-209 - http://marc.info/?l=bugtraq&m=104033016703851&w=2 - http://www.ciac.org/ciac/bulletins/n-022.shtml - http://www.securityfocus.com/bid/6360 - http://www.redhat.com/support/errata/RHSA-2002-256.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-086.php - http://marc.info/?l=bugtraq&m=103962838628940&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000552 - http://www.redhat.com/support/errata/RHSA-2002-229.html - http://www.securityfocus.com/archive/1/307045/30/26300/threaded - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html - http://www.securityfocus.com/bid/6352 - http://www.kb.cert.org/vuls/id/210148 - http://ww
/vulnwatch/2002-q4/0102.html - http://www.securityfocus.com/bid/6352 - http://www.kb.cert.org/vuls/id/210148 - http://www.iss.net/security_center/static/10820.php - http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.007.html
CVE ID: CVE-2002-1345 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6360 - http://www.kb.cert.org/vuls/id/210409 - http://marc.info/?l=bugtraq&m=103962838628940&w=2 - ftp://patches.sgi.com/support/free/security/advisories/20021205-01-A - http://archives.neohapsis.com/archives
8940&w=2 - ftp://patches.sgi.com/support/free/security/advisories/20021205-01-A - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html - http://www.iss.net/security_center/static/10821.php
CVE ID: CVE-2002-1347 State: PUBLISHED Published: 2002-12-11T05:00:00 Last Updated: 2024-08-08T03:19:28.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ing. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10812 - http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html - http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557 - http://www.securityfocus.com/bid/6349 - http://marc.info/?l=bugtraq&m=103946297703402&w=2 - http://www.debian.org/security/2002/dsa-215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10811 - http://www.securityfocus.com/bid/6348 - http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html - http://www.securityfocus.com/bid/6347 - http://www.securityfocus.com/advisories/4826 - https://exchange.xforce.ibmcloud.c
ttp://www.securityfocus.com/bid/6347 - http://www.securityfocus.com/advisories/4826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10810 - http://www.redhat.com/support/errata/RHSA-2002-283.html
CVE ID: CVE-2002-1348 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-045.html - http://www.debian.org/security/2003/dsa-251 - http://www.redhat.com/support/errata/RHSA-2003-044.html - http://www.debian.org/security/2003/dsa-249 - http://www.debian.org/security/2003/dsa-250 - http://marc.info/?l=bugtraq&m=104552193927323&w=2 - http://s
003/dsa-249 - http://www.debian.org/security/2003/dsa-250 - http://marc.info/?l=bugtraq&m=104552193927323&w=2 - http://sourceforge.net/project/shownotes.php?release_id=126233 - http://www.iss.net/security_center/static/11266.php - http://www.securityfocus.com/bid/6794
CVE ID: CVE-2002-1349 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 (POP3). Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/157961 - http://marc.info/?l=bugtraq&m=103953822705917&w=2 - http://www.securityfocus.com/bid/6350 - http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=12982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10814 - http://www.texonet.com/advisories/TEXONET
olutionId=12982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10814 - http://www.texonet.com/advisories/TEXONET-20021210.txt
CVE ID: CVE-2002-1350 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:19:28.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash). Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-050.0.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/10695 - http://www.tcpdump.org/lists/workers/2001/10/msg00101.html - http://www.redhat.com/support/errata/RHSA-2003-033.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-
- http://www.redhat.com/support/errata/RHSA-2003-033.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027 - http://www.redhat.com/support/errata/RHSA-2003-214.html - http://marc.info/?l=bugtraq&m=104032975103398&w=2 - http://www.debian.org/security/2002/dsa-206 - http://www.redhat.com/support/errata/RHSA-2003-032.html - http://www.securityfocus.com/bid/6213
CVE ID: CVE-2002-1351 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T03:19:28.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretData function, as demonstrated via a long Nick (nickname) request. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/application/poi/display?id=33&type=vulnerabilities&flashstatus=false - http://securitytracker.com/id?1005831 - http://www.securityfocus.com/bid/6477 - https://exchange.xforce.ibmc
tus=false - http://securitytracker.com/id?1005831 - http://www.securityfocus.com/bid/6477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10939
CVE ID: CVE-2002-1352 State: PUBLISHED Published: 2003-09-12T04:00:00 Last Updated: 2024-08-08T03:19:28.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/advisory/12.16.02c.txt - http://securitytracker.com/id?1005829
CVE ID: CVE-2002-1353 State: PUBLISHED Published: 2005-04-14T04:00:00 Last Updated: 2024-08-08T03:19:28.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10948 - http://secunia.com/advisories/7740/ - http://securitytracker.com/id?1005830 - http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false
CVE ID: CVE-2002-1354 State: PUBLISHED Published: 2005-04-15T04:00:00 Last Updated: 2024-08-08T03:19:28.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dot dot dot) in the cd/CWD command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/7737/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/6165 - http://securitytracker.com/id?1005832
CVE ID: CVE-2002-1355 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-290.html - http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-bgp.c.diff?r1=1.68&r2=1.69 - http://www.ethereal.com/appnotes/enpa-sa-00007.html
CVE ID: CVE-2002-1356 State: PUBLISHED Published: 2002-12-17T05:00:00 Last Updated: 2024-08-08T03:19:28.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-290.html - http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13 - http://www.ethereal.com/appnotes/enpa-sa-00007.html