Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
s: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101897994314015&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019 - http://www.osvdb.org/5357 - http://www.securityfocus.com/bid/4517 - http://www.iss.net/security_center/static/8850.php
CVE ID: CVE-2002-0153 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3935 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-019 - http://www.securityfocus.com/archive/1/251805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7969 - http://www.iss.net/security_cente
cus.com/archive/1/251805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7969 - http://www.iss.net/security_center/static/8851.php - http://www.osvdb.org/5356
CVE ID: CVE-2002-0154 State: PUBLISHED Published: 2002-04-27T04:00:00 Last Updated: 2024-08-08T02:42:27.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/627275 - http://www.cert.org/advisories/CA-2002-22.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A121 - http://marc.info/?l=bugtraq&m=101535353331625&w=2 - http://www.securityf
/definition/oval%3Aorg.mitre.oval%3Adef%3A121 - http://marc.info/?l=bugtraq&m=101535353331625&w=2 - http://www.securityfocus.com/archive/1/261775 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-020
CVE ID: CVE-2002-0155 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4707 - http://www.cert.org/advisories/CA-2002-13.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-022 - http://www.iss.net/security_center/static/9041.php - http:/
com/en-us/security-updates/securitybulletins/2002/ms02-022 - http://www.iss.net/security_center/static/9041.php - http://marc.info/?l=bugtraq&m=102089960531919&w=2
CVE ID: CVE-2002-0157 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2002-064.html - http://online.securityfocus.com/archive/1/270691/2002-04-29/2002-05-05/0 - http://www.securityfocus.com/bid/4373 - http://www.iss.net/security_center/static/8995.php
CVE ID: CVE-2002-0158 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:42:27.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8703 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A33 - http://
/2002-q2/0000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A33 - http://marc.info/?l=bugtraq&m=101776858410652&w=2 - http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F108652 - http://www.securityfocus.com/bid/4408
CVE ID: CVE-2002-0159 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN module only (denial of service of administration function) or execute arbitrary code via format strings in the URL to port 2002. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/2062 - http://www.iss.net/security_center/static/8742.php - http://marc.info/?l=bugtraq&m=101787248913611
/www.osvdb.org/2062 - http://www.iss.net/security_center/static/8742.php - http://marc.info/?l=bugtraq&m=101787248913611&w=2 - http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml - http://www.securityfocus.com/bid/4416
CVE ID: CVE-2002-0160 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web root via a ..\.. (modified ..) in the URL to port 2002. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101786689128667&w=2 - http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml - http://www.osvdb.org/5352
CVE ID: CVE-2002-0162 State: PUBLISHED Published: 2002-03-30T05:00:00 Last Updated: 2024-08-08T02:42:27.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101724766216872 - http://www.securityfocus.com/bid/4374 - http://online.securityfocus.com/archive/82/264233 - http://www.iss.net/security_center/static/8652.php - http://list.kaybee.org/archives/logwatch-announce/2002-March/000002.html
CVE ID: CVE-2002-0163 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2002-051.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-027.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-017.1.txt - http://marc.info/?l=bugtraq&m=101716495023226&w
php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-017.1.txt - http://marc.info/?l=bugtraq&m=101716495023226&w=2 - http://www.iss.net/security_center/static/8628.php - http://www.securityfocus.com/bid/4363 - http://www.squid-cache.org/Advisories/SQUID-2002_2.txt - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:19.squid.asc
CVE ID: CVE-2002-0164 State: PUBLISHED Published: 2002-04-05T05:00:00 Last Updated: 2024-08-08T02:42:27.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-228529-1 - ftp://patches.sgi.com/support/free/security/advisories/20021001-01-P - http://marc.info/?l=bugtraq&m=103547625009363&w=2
ftp://patches.sgi.com/support/free/security/advisories/20021001-01-P - http://marc.info/?l=bugtraq&m=103547625009363&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8706 - http://www.securityfocus.com/bid/4396 - http://www.debian.org/security/2003/dsa-380 - ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.14/CSSA-2002-SCO.14.txt - http://www.redhat.com/support/errata/RHSA-2003-067.html - http://www.linuxsecurity.com/advisories/caldera_advisory-2006.html - http://sunsolve.sun.com/search/document.do?assetkey=1-77-1017429.1-1
CVE ID: CVE-2002-0165 State: PUBLISHED Published: 2002-04-05T05:00:00 Last Updated: 2024-08-08T02:42:27.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different vulnerability than CVE-2002-0162. Additional Analyst Notes: - CVE Program Container: References: - http://list.kaybee.org/archives/logwatch-announce/2002-March/000003.html - http://www.iss.net/security_center/static/8652.php - http://marc.info/?l=bugtraq&m=101787227513000&w=2
CVE ID: CVE-2002-0166 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc - http://www.redhat.com/support/errata/RHSA-2002-059.html - http://www.iss.net/security_center/static/8656.php - http://www.osvdb.org/2059 - http://www.debian.org
A-2002-059.html - http://www.iss.net/security_center/static/8656.php - http://www.osvdb.org/2059 - http://www.debian.org/security/2002/dsa-125 - http://www.securityfocus.com/bid/4389
CVE ID: CVE-2002-0167 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:29.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2002_015_imlib_txt.html - http://www.redhat.com/support/errata/RHSA-2002-048.html - http://www.securityfocus.com/bid/4339 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php - ftp://ftp.cald
tp://www.securityfocus.com/bid/4339 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470
CVE ID: CVE-2002-0168 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4336 - http://www.novell.com/linux/security/advisories/2002_015_imlib_txt.html - http://www.redhat.com/support/errata/RHSA-2002-048.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php - ftp://ftp.c
.com/support/errata/RHSA-2002-048.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470
CVE ID: CVE-2002-0169 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4654 - http://www.iss.net/security_center/static/8983.php - http://www.redhat.com/support/errata/RHSA-2002-062.html - http://www.osvdb.org/5349 - http://online.securi
ic/8983.php - http://www.redhat.com/support/errata/RHSA-2002-062.html - http://www.osvdb.org/5349 - http://online.securityfocus.com/advisories/4095
CVE ID: CVE-2002-0170 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101503023511996&w=2 - http://www.zope.org/Products/Zope/hotfixes/ - http://www.securityfocus.com/bid/4229 - http://www.redhat.com/support/errata/RHSA-2002-060.html - http://www.iss.net/security_center/static/8334.php - http://www.osvdb.org/5350
CVE ID: CVE-2002-0171 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8933.php - ftp://patches.sgi.com/support/free/security/advisories/20020406-01-P - http://www.kb.cert.org/vuls/id/498707 - http://www.securityfocus.com/bid/4588 - http://www.osvdb.org/5351
CVE ID: CVE-2002-0172 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: /dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic disruption). Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8960.php - http://www.securityfocus.com/bid/4648 - http://www.kb.cert.org/vuls/id/770891 - http://www.osvdb.org/4695 - ftp://patches.sgi.com/support/free/security/advisories/20020408-01-I
CVE ID: CVE-2002-0173 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5359 - http://www.iss.net/security_center/static/8959.php - http://www.securityfocus.com/bid/4644 - ftp://patches.sgi.com/support/free/security/advisories/20020409-01-I
CVE ID: CVE-2002-0174 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:29.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4655 - http://www.iss.net/security_center/static/8981.php - ftp://patches.sgi.com/support/free/security/advisories/20020501-01-I
CVE ID: CVE-2002-0175 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8593.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html - http://online.securityfocus.com/archive/1/263121 - http://www.securityfocus.com/bid/4326 - http://www.linux-mandrake.com/en/security/2002/M
ityfocus.com/archive/1/263121 - http://www.securityfocus.com/bid/4326 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php
CVE ID: CVE-2002-0176 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html - http://www.iss.net/security_center/static/8594.php - http://online.securityfocus.com/archive/1/263121 - http://www.securityfocus.com/bid/4327 - http://www.linux-mandrake.com/en/secu
nline.securityfocus.com/archive/1/263121 - http://www.securityfocus.com/bid/4327 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php
CVE ID: CVE-2002-0177 State: PUBLISHED Published: 2002-04-18T04:00:00 Last Updated: 2024-08-08T02:42:28.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101780890326179&w=2 - http://www.kb.cert.org/vuls/id/596387 - http://www.xiph.org/archives/icecast/2616.html - http://www.securityfocus.com/bid/4415 - http://marc.info/?l=bugtraq&m=101786838300906&w=2 - http://marc.info/?l=bugtraq&m=101793704306035&w=2
CVE ID: CVE-2002-0178 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:27.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-040.0.txt - http://www.securityfocus.com/bid/4742 - http://marc.info/?l=bugtraq&m=103599320902432&w=2 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-052.php - http://www.redhat.com/su
raq&m=103599320902432&w=2 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-052.php - http://www.redhat.com/support/errata/RHSA-2003-180.html - http://www.kb.cert.org/vuls/id/336083 - http://www.osvdb.org/8274 - http://www.aerasec.de/security/index.html?id=ae-200204-033&lang=en - http://www.redhat.com/support/errata/RHSA-2002-065.html - http://www.iss.net/security_center/static/9075.php - http://online.securityfocus.com/advisories/4132
CVE ID: CVE-2002-0179 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:42:27.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-127 - http://www.securityfocus.com/bid/4534 - http://www.iss.net/security_center/static/8852.php
CVE ID: CVE-2002-0180 State: PUBLISHED Published: 2002-04-18T04:00:00 Last Updated: 2024-08-08T02:42:27.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101888467527673&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8837 - http://www.mrunix.net/webalizer/news.html - http://www.securityfocus.com/bid/4504 - http://www.kb.cert.org/vuls/id/582923
CVE ID: CVE-2002-0181 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.horde.org/show_bug.cgi?id=916 - http://marc.info/?l=bugtraq&m=101828033830744&w=2 - http://www.calderasystems.com/support/security/advisories/CSSA-2002-016.1.txt - http://www.debian.org/security/2002/dsa-126 - http://www.iss.net/security_center/stati
/advisories/CSSA-2002-016.1.txt - http://www.debian.org/security/2002/dsa-126 - http://www.iss.net/security_center/static/8769.php - http://www.securityfocus.com/bid/4444 - http://www.osvdb.org/5345 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000473
CVE ID: CVE-2002-0184 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101975443619600&w=2 - http://www.debian.org/security/2002/dsa-128 - http://marc.info/?l=bugtraq&m=101979472822196&w=2 - http://www.redhat.com/support/errata/RHSA-2002-071.html - http://www.kb.cert.org/vuls/
l=bugtraq&m=101979472822196&w=2 - http://www.redhat.com/support/errata/RHSA-2002-071.html - http://www.kb.cert.org/vuls/id/820083 - http://www.novell.com/linux/security/advisories/2002_014_sudo_txt.html - http://marc.info/?l=bugtraq&m=101974610509912&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000475 - http://www.iss.net/security_center/static/8936.php - http://www.securityfocus.com/bid/4593 - http://www.linuxsecurity.com/advisories/other_advisory-2040.html - http://marc.info/?l=bugtraq&m=102010164413135&w=2 - http://www.redhat.com/support/errata/RHSA-2002-072.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-028.php3 - http://marc.info/?l=bugtraq&m=1020101
02-072.html - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-028.php3 - http://marc.info/?l=bugtraq&m=102010164413135&w=2
CVE ID: CVE-2002-0185 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:42:28.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8997.php - http://www.securityfocus.com/bid/4656 - http://www.modpython.org/pipermail/mod_python/2002-April/002003.html - http://www.modpython.org/pipermail/mod_python/2002-April/001991.html - http:
permail/mod_python/2002-April/002003.html - http://www.modpython.org/pipermail/mod_python/2002-April/001991.html - http://www.redhat.com/support/errata/RHSA-2002-070.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000477