Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2001-1562 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=100526142205694&w=2 - http://www.debian.org/security/2001/dsa-085 - http://www.securityfocus.com/bid/3456 - http://www.iss.net/security_center/static/7317.php
CVE ID: CVE-2001-1563 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42892 - http://archives.neohapsis.com/archives/hp/2001-q4/0062.html
CVE ID: CVE-2001-1564 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or setgid privileges are dropped, which could allow local users to cause a denial of service by exhausting available disk space. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5159 - http://archives.neohapsis.com/archives/hp/2001-q3/0000.html - http://www.iss.net/security_center/static/681
def%3A5159 - http://archives.neohapsis.com/archives/hp/2001-q3/0000.html - http://www.iss.net/security_center/static/6810.php - http://www.securityfocus.com/bid/3416
CVE ID: CVE-2001-1565 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T02:02:15.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which allows local users to obtain authentication information via the ps command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3753 - http://www.macsecurity.org/pipermail/macsec/2001-December/000299.html - http://www.iss.net/security_center/static/7750.php
CVE ID: CVE-2001-1566 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T23:26:20.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format string specifiers in the __vanessa_logger_log function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vergenet.net/linux/perdition/string_format.html - http://archives.neohapsis.com/archives/vulnwatch/2001-q4/0082.html - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0260.html - http://www.securityfocus.com/bid/3740
CVE ID: CVE-2001-1567 State: PUBLISHED Published: 2005-07-14T04:00:00 Last Updated: 2024-08-08T04:58:11.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly sensitive Notes template files (.ntf) via an HTTP request with a large number of "+" characters before the .nsf file extension, which are converted to spaces by Domino. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101285903120879&w=2 - http://marc.info/?l=bugtraq&m=101284222932568&w=2 - http://www.iss.net/security_center/static/8072.php - htt
20879&w=2 - http://marc.info/?l=bugtraq&m=101284222932568&w=2 - http://www.iss.net/security_center/static/8072.php - http://marc.info/?l=bugtraq&m=101286525008089&w=2 - http://www.securityfocus.com/bid/4022 - http://www.nextgenss.com/papers/hpldws.pdf
CVE ID: CVE-2001-1568 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T02:51:52.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6814.php - http://archives.neohapsis.com/archives/bugtraq/2001-07/0127.html
CVE ID: CVE-2001-1569 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-17T02:31:38.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows remote attackers to spoof SSL certificates via a man-in-the-middle attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/6814.php - http://www.securityfocus.com/archive/1/195619
CVE ID: CVE-2001-1570 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T22:20:20.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setting the fast user switch to the same user (self) multiple times, which causes other accounts to be locked out. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3717 - http://www.iss.net/security_center/static/7731.php - http://archives.neohapsis.com/archives/bugtraq/2001-12/0213.html
CVE ID: CVE-2001-1571 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T22:30:09.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain terminal server user account names via sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7732.php - http://www.securityfocus.com/bid/3720 - http://archives.neohapsis.com/archives/bugtraq/2001-12/0213.html
CVE ID: CVE-2001-1572 State: PUBLISHED Published: 2005-07-14T04:00:00Z Last Updated: 2024-09-16T16:52:59.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers to bypass packet filters via small packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/7267.php - http://archives.neohapsis.com/archives/bugtraq/2001-10/0057.html - http://www.securityfocus.com/bid/3418
CVE ID: CVE-2001-1573 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T20:27:24.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in smtpscan.dll for Trend Micro InterScan VirusWall 3.51 for Windows NT has allows remote attackers to execute arbitrary code via a certain configuration parameter. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00407.html
CVE ID: CVE-2001-1574 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T17:48:15.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) HttpSaveCVP.dll and (2) HttpSaveCSP.dll in Trend Micro InterScan VirusWall 3.5.1 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00408.html
CVE ID: CVE-2001-1575 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T04:58:11.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/2945 - http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00409.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/6759
CVE ID: CVE-2001-1576 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T23:05:29.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00404.html
CVE ID: CVE-2001-1577 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T04:58:11.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7666 - http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0017.html
CVE ID: CVE-2001-1578 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T20:57:46.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0014.html
CVE ID: CVE-2001-1579 State: PUBLISHED Published: 2005-08-05T04:00:00Z Last Updated: 2024-09-16T16:13:13.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/linux/caldera/2001-q4/0020.html
CVE ID: CVE-2001-1580 State: PUBLISHED Published: 2005-08-05T04:00:00 Last Updated: 2024-08-08T04:58:11.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0221.html - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0218.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7726 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001
://exchange.xforce.ibmcloud.com/vulnerabilities/7726 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0204.html - http://www.securityfocus.com/bid/3715
CVE ID: CVE-2001-1581 State: PUBLISHED Published: 2007-05-31T00:00:00 Last Updated: 2024-08-08T04:58:11.398Z Vendors: n/a Products: n/a Problem Types: n/a Description: The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a modified name in a Content-Type header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/6801 - http://www.mimesweeper.com/support/technotes/notes/1102.asp
CVE ID: CVE-2001-1582 State: PUBLISHED Published: 2007-09-23T23:00:00Z Last Updated: 2024-09-16T17:14:43.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/bugtraq/2001/Jul/0091.html - http://www.securityfocus.com/bid/2931 - http://seclists.org/bugtraq/2001/Jun/0365.html - http://seclists.org/bugtraq/2001/Jul/0077.html - http://www.securiteam.com/unixfocus/5IP0O2A4KS.html
CVE ID: CVE-2001-1583 State: PUBLISHED Published: 2007-09-23T23:00:00 Last Updated: 2024-08-08T04:58:11.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220. Additional Analyst Notes: - CVE Program Container: References: - http://metasploit.com/projects/Framework/modules/exploits/solaris_lpd_exec.pm - http://www.securityfocus.com/bid/3274 - http://marc.info/?l=bugtraq&m=99929694701826&w=2 - http://www.osvdb.org/15131 -
http://www.securityfocus.com/bid/3274 - http://marc.info/?l=bugtraq&m=99929694701826&w=2 - http://www.osvdb.org/15131 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7087 - http://www.derkeiler.com/Mailing-Lists/securityfocus/incidents/2001-08/0490.html
CVE ID: CVE-2001-1584 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T04:58:11.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/unixfocus/5MP0M2K5FC.html - http://www.securityfocus.com/bid/3360 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7178
CVE ID: CVE-2001-1585 State: PUBLISHED Published: 2007-10-06T21:00:00 Last Updated: 2024-08-08T04:58:11.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0159.html - http://www.openbsd.org/
gram Container: References: - http://archives.neohapsis.com/archives/bugtraq/2001-02/0159.html - http://www.openbsd.org/advisories/ssh_bypass.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/6084 - http://online.securityfocus.com/bid/2356
CVE ID: CVE-2001-1586 State: PUBLISHED Published: 2010-02-12T21:00:00 Last Updated: 2024-08-08T04:58:11.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ ("%2E%2E%2F%") sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/56631 - http://seclists.org/bugtraq/2001/Jul/660 - http://www.securiteam.com/windowsntfocus/5TP0B1P4UK.html - http://www.securityfocus.com/bid/3112 - http://www.a
ul/660 - http://www.securiteam.com/windowsntfocus/5TP0B1P4UK.html - http://www.securityfocus.com/bid/3112 - http://www.analogx.com/contents/download/network/sswww.htm
CVE ID: CVE-2001-1587 State: PUBLISHED Published: 2010-04-05T15:15:00Z Last Updated: 2024-09-16T19:30:47.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous STOU command. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CVE ID: CVE-2001-1588 State: REJECTED Published: 2020-11-05T19:46:42 Last Updated: 2020-11-05T19:46:42 Description: No description available.
CVE ID: CVE-2001-1589 State: REJECTED Published: 2020-11-05T19:47:08 Last Updated: 2020-11-05T19:47:08 Description: No description available.
CVE ID: CVE-2001-1590 State: REJECTED Published: 2020-11-05T19:47:31 Last Updated: 2020-11-05T19:47:31 Description: No description available.
CVE ID: CVE-2001-1591 State: REJECTED Published: 2020-11-05T19:48:08 Last Updated: 2020-11-05T19:48:08 Description: No description available.
CVE ID: CVE-2001-1592 State: REJECTED Published: 2020-11-05T19:48:31 Last Updated: 2020-11-05T19:48:31 Description: No description available.
CVE ID: CVE-2001-1593 State: PUBLISHED Published: 2014-04-05T21:00:00 Last Updated: 2024-08-08T04:58:11.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737385 - http://pkgs.fedoraproject.org/cgit/a2ps.git/plain/a2ps-4.13-security.patch - https://bugzilla.redhat.com/show_bug.cgi?id=1060630 - http://seclists.org/oss-sec/2014/q1/253 - http://secli
ity.patch - https://bugzilla.redhat.com/show_bug.cgi?id=1060630 - http://seclists.org/oss-sec/2014/q1/253 - http://seclists.org/oss-sec/2014/q1/257 - http://www.debian.org/security/2014/dsa-2892 - http://seclists.org/oss-sec/2014/q1/237
CVE ID: CVE-2001-1594 State: PUBLISHED Published: 2015-08-04T10:00:00 Last Updated: 2024-08-08T04:58:11.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, (3) 0 for the entegra user of the Codonics printer FTP service, (4) eNTEGRA for the eNTEGRA P&R user account, (5) insite for the WinVNC Login, and possibly other accounts, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst
assword is default, hardcoded, or dependent on another system or product that requires a fixed value. Additional Analyst Notes: - CVE Program Container: References: - http://apps.gehealthcare.com/servlet/ClientServlet/2263784.pdf?DOCCLASS=A&REQ=RAC&DIRECTION=2263784-100&FILENAME=2263784.pdf&FILEREV=5&DOCREV_ORG=5&SUBMIT=+ACCEPT+ - http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/ - https://twitter.com/digitalbond/status/619250429751222277 - https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CVE ID: CVE-2002-0001 State: PUBLISHED Published: 2002-01-03T05:00:00 Last Updated: 2024-08-08T02:35:17.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/advisories/3778 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:04.mutt.asc - http://www.debian.org/security/2002/dsa-096 - http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html - http://distro.conectiva.
/www.debian.org/security/2002/dsa-096 - http://www.mutt.org/announce/mutt-1.2.5.1-1.3.25.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000449 - http://www.iss.net/security_center/static/7759.php - http://www.securityfocus.com/bid/3774 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-002.0.txt - http://www.novell.com/linux/security/advisories/2002_001_mutt_txt.html - http://marc.info/?l=bugtraq&m=100994648918287&w=2 - http://www.redhat.com/support/errata/RHSA-2002-003.html
CVE ID: CVE-2002-0002 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=stunnel-users&m=100869449828705&w=2 - http://www.securityfocus.com/bid/3748 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-004.php3 - http://online.securityfocus.com/archive/1/248149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7741 - http://stunnel.mirt
ine.securityfocus.com/archive/1/248149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7741 - http://stunnel.mirt.net/news.html - http://www.redhat.com/support/errata/RHSA-2002-002.html - http://online.securityfocus.com/archive/1/247427
CVE ID: CVE-2002-0003 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system. Additional Analyst Notes: - CVE Program Container: References: - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-012.php - http://online.securityfocus.com/advisories/3793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7881 - http://www.redhat.com/support/errata/RHSA-2002-004.html - http://www.securityfocus.com/bid/3869
CVE ID: CVE-2002-0004 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7909 - http://online.securityfocus.com/advisories/3969 - http://www.debian.org/security/2002/dsa-102 - http://www.redhat.com/support/errata/RHSA-2002-015.html - http://online.securityfocus.com/advisories/3833 - http://marc.info/?l=bugtraq&m
.com/support/errata/RHSA-2002-015.html - http://online.securityfocus.com/advisories/3833 - http://marc.info/?l=bugtraq&m=101128661602088&w=2 - http://www.securityfocus.com/bid/3886 - http://www.novell.com/linux/security/advisories/2002_003_at_txt.html - http://marc.info/?l=bugtraq&m=101147632721031&w=2
CVE ID: CVE-2002-0005 State: PUBLISHED Published: 2002-03-09T05:00:00 Last Updated: 2024-08-08T02:35:17.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7743 - http://www.kb.cert.org/vuls/id/907819 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=72 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198 - http://
=ntbugtraq&F=P&S=&P=72 - http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198 - http://www.securityfocus.com/bid/3769 - http://marc.info/?l=ntbugtraq&m=100998295512885&w=2 - http://www.securityfocus.com/archive/1/247944