Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1050 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:16.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9729.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html - http://www.securityfocus.com/bid/5349 - http://www.novell.com/linux/security/advisories/2002_035_hylafax.html - http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=312 - http://ww
l.com/linux/security/advisories/2002_035_hylafax.html - http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=312 - http://www.debian.org/security/2002/dsa-148 - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:055
CVE ID: CVE-2002-1051 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-06/0040.html - http://www.securityfocus.com/bid/4956 - http://www.novell.com/linux/security/advisories/2000_041_traceroute_txt.html - http://marc.info/?l=bugtraq&m=102753136231920&w=2 - http://marc.info/?l=bugtraq&m=102737546927749&w=2 - http://arc
tml - http://marc.info/?l=bugtraq&m=102753136231920&w=2 - http://marc.info/?l=bugtraq&m=102737546927749&w=2 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0254.html - http://www.iss.net/security_center/static/9291.php
CVE ID: CVE-2002-1052 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5258 - http://www.iss.net/security_center/static/9587.php - http://marc.info/?l=bugtraq&m=102691753204392&w=2 - http://marc.info/?l=bugtraq&m=102692936820193&w=2 - http://www.iss.net/security
.info/?l=bugtraq&m=102691753204392&w=2 - http://marc.info/?l=bugtraq&m=102692936820193&w=2 - http://www.iss.net/security_center/static/9586.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0031.html - http://www.securityfocus.com/bid/5251 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0028.html
CVE ID: CVE-2002-1053 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/4015 - http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html - http://www.iss.net/security_center/static/9914.php - http://www.securityfocus.com/bid/5506 - http://www.w3.
/0190.html - http://www.iss.net/security_center/static/9914.php - http://www.securityfocus.com/bid/5506 - http://www.w3.org/Jigsaw/RelNotes.html#2.2.1
CVE ID: CVE-2002-1054 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:16.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5283 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0035.html - http://www.osvdb.org/4995 - http://www.pablovandermeer.nl/ftpserversrc.zip - http://www.iss.net/security_center/static/9647.php - http://online.securityfocus
w.pablovandermeer.nl/ftpserversrc.zip - http://www.iss.net/security_center/static/9647.php - http://online.securityfocus.com/archive/1/283665
CVE ID: CVE-2002-1055 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0353.html - http://www.securityfocus.com/bid/5339 - http://www.iss.net/security_center/static/9701.php
CVE ID: CVE-2002-1056 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T03:12:16.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A429 - http://www.securityfocus.com/bid/4397 - https://docs.microsoft.com
search/definition/oval%3Aorg.mitre.oval%3Adef%3A429 - http://www.securityfocus.com/bid/4397 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-021 - http://marc.info/?l=bugtraq&m=101760380418890&w=2 - http://online.securityfocus.com/archive/1/265621 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A205 - http://www.iss.net/security_center/static/8708.php
CVE ID: CVE-2002-1057 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9651.php - http://www.securityfocus.com/bid/5285 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0245.html
CVE ID: CVE-2002-1058 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html - http://www.securityfocus.com/bid/5297 - http://www.iss.net/security_center/static/9669.php
CVE ID: CVE-2002-1059 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102746007908689&w=2 - http://marc.info/?l=bugtraq&m=102744150718462&w=2 - http://www.iss.net/security_center/static/9650.php - http://www.osvdb.org/4991 - http://www.securityfocus.com/bid/5287 - http://www.vandyke.com/products/securecrt/security07-25-02.html
CVE ID: CVE-2002-1060 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5305 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0283.html - http://www.i
http://www.securityfocus.com/bid/5305 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0283.html - http://www.iss.net/security_center/static/9674.php - http://download.cacheflow.com/release/CA/4.1.00-docs/CACacheOS41fixes.htm - http://www.securityfocus.com/bid/5608
CVE ID: CVE-2002-1061 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the HTTP proxy on port 3128 with a long major version number, (3) a long OK reply from a POP3 server, and (4) a long SMTP server response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5322 - http://archives
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5322 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html - http://www.iss.net/security_center/static/9682.php - http://www.securityfocus.com/bid/5324 - http://www.iss.net/security_center/static/9686.php - http://www.iss.net/security_center/static/9685.php - http://www.iss.net/security_center/static/9683.php - http://www.securityfocus.com/bid/5320 - http://www.securityfocus.com/bid/5319
CVE ID: CVE-2002-1062 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html - http://www.iss.net/security_center/static/9684.php - http://www.securityfocus.com/bid/5321
CVE ID: CVE-2002-1063 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html - http://www.securityfocus.com/bid/5325 - http://www.iss.net/security_center/static/9687.php
CVE ID: CVE-2002-1064 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html - http://www.securityfocus.com/bid/5326 - http://www.iss.net/security_center/static/9688.php
CVE ID: CVE-2002-1065 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html - http://www.iss.net/security_center/static/9688.php
CVE ID: CVE-2002-1066 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html - http://www.iss.net/security_center/static/9689.php - http://www.securityfocus.com/bid/5327
CVE ID: CVE-2002-1067 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service (reboot and reset) via a long password, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5329 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0336.html - http://www.iss.net/security_center/static/9702.php
CVE ID: CVE-2002-1068 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5330 - http://marc.info/?l=vuln-dev&m=102779425117680&w=2 - http://www.iss.net/security_center/static/9703.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0341.html
CVE ID: CVE-2002-1069 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm, (2) Device Status, or (3) Device Information. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9969.php - http://online.securityfocus.com/archive/1/288584 - http://www.iss.net/security_center/static/9967.php - http://www.securityfocus.com/b
securityfocus.com/archive/1/288584 - http://www.iss.net/security_center/static/9967.php - http://www.securityfocus.com/bid/5553 - http://marc.info/?l=bugtraq&m=103004834131542&w=2 - http://www.securityfocus.com/bid/5544
CVE ID: CVE-2002-1070 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5254 - http://www.iss.net/security_center/static/9627.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0190.html
CVE ID: CVE-2002-1071 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet with both the SYN and ACK flags set. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/277307 - http://www.iss.net/security_center/static/9372.php - http://www.securityfocus.com/bid/5034 - http://online.securityfocus.com/archive/1/277242 - http://online.securityfocus.com/archive/1/277303
CVE ID: CVE-2002-1072 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via an oversized, fragmented "jolt" style ICMP packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9655.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0036.html - http://online.securityfocus.com/archive/1/283999 - http://www.securityfocus.com/bid/5292
CVE ID: CVE-2002-1073 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5261 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0195.html - http://www.iss.net/security_center/static/9618.php
CVE ID: CVE-2002-1075 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9673.php - http://archives.neohapsis.com/archives/bugtraq/2002-07/0277.html - http://www.securityfocus.com/bid/5302
CVE ID: CVE-2002-1076 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0326.html - http://archives.neohapsis.com/archives/bugtraq/2002-07/0368.html - http://support.ipswitch.com/kb/IM-20020731-DM02.htm - http://www.iss.net/security_center/static/9679.php - http://www.securityfocus.com/bid/5323 - http://archives.neo
2.htm - http://www.iss.net/security_center/static/9679.php - http://www.securityfocus.com/bid/5323 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0363.html - http://support.ipswitch.com/kb/IM-20020729-DM01.htm
CVE ID: CVE-2002-1077 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0399.html - http://www.securityfocus.com/bid/5365 - http://www.iss.net/security_center/static/9722.php
CVE ID: CVE-2002-1078 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5345 - http://www.iss.net/security_center/static/9721.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0043.html - http://online.securityfocus.com/archive/1/284904
CVE ID: CVE-2002-1079 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.aprelium.com/news/patch1033.html - http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html - http://www.iss.net/security_center/static/9940.php - http://www.osvdb.org/3285 - http://www.iss.net/security_center/static/9941.php - http://www.securityfocus.com/bid/5547
CVE ID: CVE-2002-1080 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:17.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.chl, (2) consport.chl, (3) general.chl, (4) srvparam.chl, and (5) advanced.chl. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5548 - http://www.iss.net/security_center/static/9957.php - http://www.aprelium.com/news/patch1033.html - http://archives.neohapsis.com/archives/bugtraq/20
center/static/9957.php - http://www.aprelium.com/news/patch1033.html - http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html
CVE ID: CVE-2002-1081 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:12:17.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character. Additional Analyst Notes: - CVE Program Container: References: - http://www.aprelium.com/news/patch1033.html - http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html - http://www.osvdb.org/3286 - http://www.securityfocus.com/bid/5549 - http://www.iss.net/security_center/static/9956.php
CVE ID: CVE-2002-1082 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/284229 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html - http://www.iss.net/security_center/static/9698.php
CVE ID: CVE-2002-1083 State: PUBLISHED Published: 2002-08-31T04:00:00 Last Updated: 2024-08-08T03:12:16.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories using the Maintain Images file listing, via .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/284229 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html - http://www.iss.net/security_center/static/9710.php