Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-2393 State: PUBLISHED Published: 2007-10-31T16:00:00Z Last Updated: 2024-09-17T02:16:14.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service (no new connections) via a series of MKD commands. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0109.html - http://www.securityfocus.com/bid/6112 - http://www.iss.net/security_center/static/10573.php
CVE ID: CVE-2002-2394 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T19:46:14.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/291538 - http://www.iss.net/security_center/static/10106.php - http://www.securityfocus.com/bid/5697
CVE ID: CVE-2002-2395 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-17T02:37:43.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5701 - http://www.iss.net/security_center/static/10107.php - http://www.securityfocus.com/archive/1/291538
CVE ID: CVE-2002-2396 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-17T02:31:03.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option. Additional Analyst Notes: - CVE Program Container: References: - http://www.netric.org/advisories/netric-adv010.txt - http://www.securityfocus.com/bid/5760 - http://www.iss.net/security_center/static/10142.php
CVE ID: CVE-2002-2397 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T23:05:40.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network address of 127.0.0.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/5WP0I2A8AI.html - http://www.derkeiler.com/Mailing-Lists/VulnWatch/2002-09/0015.html - http://www.iss.net/security_center/static/10108.php - http://www22.brinkster.com/nssitech/nssilabs/nssi-2002-sygatepfw5.html
CVE ID: CVE-2002-2398 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-08T03:59:12.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/299536 - http://www.securityfocus.com/bid/6167 - http://www.iss.net/security_center/static/10611.php - http://securityreason.com/securityalert/3332
CVE ID: CVE-2002-2399 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T23:05:26.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0150.html - http://www.securityfocus.com/bid/6170 - http://www.iss.net/security_center/static/10612.php
CVE ID: CVE-2002-2400 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-08T03:59:12.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103720432411860&w=2 - http://archives.neohapsis.com/archives/bugtraq/2002-11/0305.html - http://www.iss.net/security_center/static/10615.php - http://www.securityfocus.com/bid/6172 - http://www.securiteam.com/unixfocus/6H00I2060I.html
CVE ID: CVE-2002-2401 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T16:22:30.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10132.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0211.html - http://www.securityfocus.com/bid/5740 - http://www.abtrusion.com/msexe16.asp - http://support.microsoft.com/default.aspx?scid=kb%3B%5
curityfocus.com/bid/5740 - http://www.abtrusion.com/msexe16.asp - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B319458
CVE ID: CVE-2002-2402 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-08T03:59:12.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a default SNMP read/write community string of "secret," which allows remote attackers to read and modify router configuration information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6176 - http://www.iss.net/security_center/static/10621.php - http://marc.info/?l=bugtraq&m=103722782812519&w=2
CVE ID: CVE-2002-2403 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-08T03:59:12.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html - http://www.iss.net/security_center/static/10622.php - http://www.keyfocus.net/kfws/support/ - http://www.securityfocus.com/archive/1/299742 - http://securityreason.com/securityalert/3331 - http:
net/kfws/support/ - http://www.securityfocus.com/archive/1/299742 - http://securityreason.com/securityalert/3331 - http://www.securityfocus.com/bid/6180
CVE ID: CVE-2002-2404 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-08T03:59:11.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via a long request to the POP3 port (TCP port 110). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6183 - http://marc.info/?l=bugtraq&m=103729432602720&w=2 - http://www.iss.net/security_center/static/10632.php
CVE ID: CVE-2002-2405 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T21:07:26.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5744 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html - http://www.iss.net/security_center/static/10139.php
CVE ID: CVE-2002-2406 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T19:15:48.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6192 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0075.html - http://www.iss.net/security_center/static/10644.php
CVE ID: CVE-2002-2407 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-17T00:41:30.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bin/shutdown, (3) /sbin/fs-pkg, and (4) phshutdown by QNX experimental patches, (5) cpim, (6) vpim, (7) phrelaycfg, and (8) columns, (9) othello, (10) peg, (11) solitaire, and (12) vpoker in the games pack 2.0.3, which allows local users to gain privileges by modifying the files before permissions are changed. Additional Analyst Notes: - CVE Program Container: References:
es by modifying the files before permissions are changed. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0255.html - http://www.securityfocus.com/bid/6206 - http://www.iss.net/security_center/static/10656.php
CVE ID: CVE-2002-2408 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-17T01:52:05.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005650 - http://www.securityfocus.com/bid/6209 - http://www.iss.net/security_center/static/10657.php - http://www.gordano.com/kb.htm?q=1709
CVE ID: CVE-2002-2409 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T23:51:22.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10658.php - http://www.securityfocus.com/bid/6207 - http://archives.neohapsis.com/archives/bugtraq/2002-11/0267.html
CVE ID: CVE-2002-2410 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-17T03:58:38.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10684.php - http://archives.neohapsis.com/archives/bugtraq/2002-11/0278.html - http://www.securityfocus.com/bid/6232
CVE ID: CVE-2002-2411 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-08T03:59:12.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9115 - http://seclists.org/lists/bugtraq/2002/May/0183.html - http://www.securityfocus.com/bid/4782
CVE ID: CVE-2002-2412 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-17T03:27:38.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/273257 - http://www.securityfocus.com/bid/4781 - http://www.iss.net/security_center/static/9114.php
CVE ID: CVE-2002-2413 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T23:25:31.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-05/0178.html - http://www.securityfocus.com/bid/4783 - http://www.iss.net/security_center/static/9147.php
CVE ID: CVE-2002-2414 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-08T04:06:53.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash). Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=103783186608438&w=2 - http://www.securityfocus.com/bid/6218 - http://www.iss.net/security_center/static/10673.php
CVE ID: CVE-2002-2415 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T16:18:33.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero (null) bytes sent via UDP to a running service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6233 - http://archives.neohapsis.com/archives/bugtraq/2002-11/0291.html - http://www.iss.net/security_center/static/10680.php
CVE ID: CVE-2002-2416 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-17T03:43:21.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00306.html - http://www.securityfocus.com/bid/6308 - http://www.iss.net/security_center/static/10672.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0083.html
CVE ID: CVE-2002-2417 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-08T04:06:53.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6235 - http://securityreason.com/securityalert/3334 - http://www.iss.net/security_center/static/10681.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html - http://www.securityfocus.com/archi
atic/10681.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0088.html - http://www.securityfocus.com/archive/1/300929
CVE ID: CVE-2002-2418 State: PUBLISHED Published: 2007-11-01T17:00:00 Last Updated: 2024-08-08T04:06:53.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in acFreeProxy (aka acFP) 1.33 beta 7 allows remote attackers to inject arbitrary web script or HTML via the URL, which is inserted into an error page. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/300925 - http://www.iss.net/security_center/static/10682.php - http://www.securityfocus.com/bid/6236 - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0089.html - http://securityreason.com/securityalert/3327
CVE ID: CVE-2002-2419 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T22:45:26.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of service (crash) via a string ending with a NULL byte character. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10181.php - http://www.securityfocus.com/bid/5781 - http://ac2i.tzo.com/dctc/ChangeLog
CVE ID: CVE-2002-2420 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T20:47:39.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005190 - http://www.securityfocus.com/bid/5605
CVE ID: CVE-2002-2421 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T20:21:39.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html - http://www.iss.net/security_center/static/10190.php
CVE ID: CVE-2002-2422 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T16:12:32.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/windowsntfocus/6G00K0A5SM.html - http://online.securityfocus.com/archive/1/294020 - http://online.securityfocus.com/archive/1/294160 - http://www.securityfocus.com/bid/5780 - http://www.securityfocus
20 - http://online.securityfocus.com/archive/1/294160 - http://www.securityfocus.com/bid/5780 - http://www.securityfocus.com/archive/1/293715
CVE ID: CVE-2002-2423 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-16T17:17:37.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5770 - http://archive.cert.uni-stuttgart.de/bugtraq/2002/09/msg00267.html - http://www.iss.net/security_center/static/10153.php
CVE ID: CVE-2002-2424 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-17T00:21:25.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the style attribute of an HTML tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5569 - http://archives.neohapsis.com/archives/bugtraq/2002-08/0262.html - http://www.iss.net/security_center/static/9958.php
CVE ID: CVE-2002-2425 State: PUBLISHED Published: 2007-11-01T17:00:00Z Last Updated: 2024-09-17T04:08:57.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5383 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0486.html - http://www.iss.net/security_center/static/9756.php
CVE ID: CVE-2002-2426 State: PUBLISHED Published: 2007-11-20T00:00:00 Last Updated: 2024-08-08T04:06:53.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018962 - http://packetstorm
nal Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1018962 - http://packetstormsecurity.org/0210-exploits/hackingcitrix.txt - http://support.citrix.com/article/CTX115245 - http://www.vupen.com/english/advisories/2007/3870 - http://www.securityfocus.com/bid/26451 - http://secunia.com/advisories/27633 - http://www.gnucitizen.org/blog/citrix-owning-the-legitimate-backdoor/
CVE ID: CVE-2002-2427 State: PUBLISHED Published: 2009-02-06T19:00:00Z Last Updated: 2024-09-17T03:43:27.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603. Additional Analyst Notes: - CVE Program Container: References: - http://data.goahead.com/Software/Webserver/2.1.8/release.htm#security-features-can-be-bypassed-by-adding-an-extra-slash-in-the-url-bug01518 - http://www.kb.cert.org/vuls/id/124059
CVE ID: CVE-2002-2428 State: PUBLISHED Published: 2009-02-06T19:00:00Z Last Updated: 2024-09-17T03:52:39.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data. Additional Analyst Notes: - CVE Program Container: References: - http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c
CVE ID: CVE-2002-2429 State: PUBLISHED Published: 2009-02-06T19:00:00Z Last Updated: 2024-09-16T17:19:07.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header. Additional Analyst Notes: - CVE Program Container: References: - http://data.goahead.com/Software/Webserver/2.1.8/release.htm#fixed-vulnerability-to-malicious-code-in-webs-c
CVE ID: CVE-2002-2430 State: PUBLISHED Published: 2009-02-06T19:00:00Z Last Updated: 2024-09-16T22:35:37.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server. Additional Analyst Notes: - CVE Program Container: References: - http://data.goahead.com/Software/Webserver/2.1.8/release.htm#cpu-utilization-hangs-at-100-on-a-socket-disconnect-bug01865