Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1608 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:54.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://www.kb.cert.org/vuls/id/629289 - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE ID: CVE-2002-1609 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:55.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://www.kb.cert.org/vuls/id/602009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE ID: CVE-2002-1610 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:55.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10014 - http://www.securityfocus.com/bid/5599 - http://www.kb.cert.org/vuls/id/612833 - http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00430.html
CVE ID: CVE-2002-1611 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:54.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://ftp.support.compaq.com.au/pub/patches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT00131500520.txt - http://www.kb.cert.org/vuls/id/11573
tches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT00131500520.txt - http://www.kb.cert.org/vuls/id/115731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE ID: CVE-2002-1612 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:54.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://ftp.support.compaq.com.au/pub/patches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT00131500520.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/10016 - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?s
ange.xforce.ibmcloud.com/vulnerabilities/10016 - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://www.kb.cert.org/vuls/id/408771
CVE ID: CVE-2002-1613 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:54.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://www.kb.cert.org/vuls/id/173977 - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE ID: CVE-2002-1614 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:54.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/435611 - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - https://exchange.xforce.ibmcloud.com/vulner
q.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10016 - http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html - http://www.securityfocus.com/archive/1/290115
CVE ID: CVE-2002-1615 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:55.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader. Additional Analyst Notes: - CVE Program Container: References: - http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11 - http://www.kb.cert.org/vuls/id/506441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE ID: CVE-2002-1616 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:55.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/177067 - http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html - http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_su.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/10614 - http://www.kb.cert.org/vuls/id/1933
ck/tru64/TRU64_su.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/10614 - http://www.kb.cert.org/vuls/id/193347 - http://www.securityfocus.com/bid/5382 - http://www.securityfocus.com/bid/5381 - http://www.kb.cert.org/vuls/id/671627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11620 - http://www.securityfocus.com/bid/5379 - http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html - http://www.kb.cert.org/vuls/id/137555 - http://www.securityfocus.com/bid/5380 - http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html - http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html - http://www.securityfocus.com/archive/1/290115 - http://archives.neohap
s.com/archives/fulldisclosure/2002-q3/1203.html - http://www.securityfocus.com/archive/1/290115 - http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html - http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html - http://www.kb.cert.org/vuls/id/864083
CVE ID: CVE-2002-1617 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:54.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html - http://www.kb.cert.org/vuls/id/931579 - http://www.kb.cert.org/vuls/id/836275 - http://archives.neohapsis.com/arch
tml - http://www.kb.cert.org/vuls/id/931579 - http://www.kb.cert.org/vuls/id/836275 - http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html - http://www.kb.cert.org/vuls/id/202939 - http://www.securityfocus.com/archive/1/290115 - http://www.kb.cert.org/vuls/id/600699 - http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtterm.txt - http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtprintinfo.txt - http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dxterm.txt - http://www.blacksheepnetworks.com/security/hack/tru64/TRU64_dtaction.txt
CVE ID: CVE-2002-1618 State: PUBLISHED Published: 2005-03-25T05:00:00 Last Updated: 2024-08-08T03:34:55.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5979 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10399 - http://www.securityfocus.com/advisories/4569 - http://www.kb.cert.org/vuls/id/
orce.ibmcloud.com/vulnerabilities/10399 - http://www.securityfocus.com/advisories/4569 - http://www.kb.cert.org/vuls/id/248337
CVE ID: CVE-2002-1619 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:54.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10127 - http://www.kb.cert.org/vuls/id/152955 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY27310&apar=only
CVE ID: CVE-2002-1620 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:55.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY28063&apar=only - http://www.kb.cert.org/vuls/id/640827 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY28065&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY20699&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/10671
CVE ID: CVE-2002-1621 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:54.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=IY26503&apar=only - http://www.kb.cert.org/vuls/id/209363 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY28698&apar=only - http://www.kb.cert.org/vuls/id/SVIM-59FJVF
CVE ID: CVE-2002-1622 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:55.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/273779 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY28706&apar=only - https://exchange.xforce.ibmcloud.com/vulnerabilities/10112
CVE ID: CVE-2002-1623 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:54.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by (1) monitoring responses before the password is supplied or (2) sniffing, as originally reported for FireWall-1 SecuRemote. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001223.html - http://mar
gram Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001223.html - http://marc.info/?l=bugtraq&m=103176164729351&w=2 - http://www.securityfocus.com/bid/5607 - http://www.kb.cert.org/vuls/id/886601 - http://www.nta-monitor.com/news/checkpoint.htm - http://www.checkpoint.com/techsupport/alerts/ike.html - http://www.securityfocus.com/archive/1/290202 - http://marc.info/?l=bugtraq&m=103124812629621&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10034 - http://www.securiteam.com/securitynews/5TP040U8AW.html
CVE ID: CVE-2002-1624 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:55.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11058 - http://www.kb.cert.org/vuls/id/772563 - http://securitytracker.com/id?1004052
CVE ID: CVE-2002-1625 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:54.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8925 - http://www.kb.cert.org/vuls/id/128491 - http://www.macromedia.com/v1/
xchange.xforce.ibmcloud.com/vulnerabilities/8925 - http://www.kb.cert.org/vuls/id/128491 - http://www.macromedia.com/v1/handlers/index.cfm?ID=22796&Method=Full&Title=Macromedia%20Flash%20Player%206%20Streaming%20Issue&Cache=False
CVE ID: CVE-2002-1626 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:55.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1003256 - http://www.kb.cert.org/vuls/id/806091 - http://www.securityfocus.com/bid/3856 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7966
CVE ID: CVE-2002-1627 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:55.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the quiz parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1003254 - http://www.kb.cert.org/vuls/id/318835 - http://www.securityfocus.com/bid/3857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7970
CVE ID: CVE-2002-1628 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:54.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the type parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7971 - http://www.securityfocus.com/bid/3854 - http://www.kb.cert.org/vuls/id/250107
CVE ID: CVE-2002-1629 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:55.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/495705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10845 - http://www.securityfocus.com/bid/7203 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0105.html
CVE ID: CVE-2002-1630 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:54.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.kb.cert.org/vuls/id/SVIM-576QLZ - http://www.securityfocus.com/bid/6556 - http://www.nextgenss.com/papers/hpoas.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/8664 - http://www.kb.cert.org/vuls/id/717827
CVE ID: CVE-2002-1631 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:55.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6556 - http://www.kb.cert.org/vuls/id/717827 - http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.kb.cert.org/vuls/id/SVIM-576QLZ - http://www.nextgenss.com/papers/hpoas.pdf
CVE ID: CVE-2002-1632 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:55.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technology/deploy/security/pdf/ias_modplsql_alert.pdf - http://www.kb.cert.org/vuls/id/SVIM-576QLZ - http://www.securityfocus.com/bid/6556 - http://www.nextgenss.com/papers/hpoas.pdf - http://www.kb.cert.org/vuls/id/717827 - https
w.securityfocus.com/bid/6556 - http://www.nextgenss.com/papers/hpoas.pdf - http://www.kb.cert.org/vuls/id/717827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8665
CVE ID: CVE-2002-1633 State: PUBLISHED Published: 2005-03-26T05:00:00 Last Updated: 2024-08-08T03:34:55.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/879386 - https://exchange.xforce
al Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/879386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9341 - http://www.securityfocus.com/archive/1/276553 - http://www.securityfocus.com/bid/5000
CVE ID: CVE-2002-1634 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/9212 - http://www.kb.cert.org/vuls/id/159203 - http://www.procheckup.com/security_info/vuln_pr0203.html - http://www.osvdb.org/17464 - http://www.osvdb.org/17465 - http://ww
/www.procheckup.com/security_info/vuln_pr0203.html - http://www.osvdb.org/17464 - http://www.osvdb.org/17465 - http://www.securityfocus.com/advisories/4158 - http://www.osvdb.org/17468 - http://www.osvdb.org/17463 - http://www.securityfocus.com/advisories/4157 - http://www.osvdb.org/17466 - http://www.securityfocus.com/bid/4874 - http://www.osvdb.org/17467 - http://www.procheckup.com/security_info/vuln_pr0201.html - http://www.osvdb.org/17461 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/10064452.htm - http://www.osvdb.org/17462
CVE ID: CVE-2002-1635 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/936507 - http://www.nextgenss.com/papers/hpoas.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/10716
CVE ID: CVE-2002-1636 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10687 - http://www.nextgenss.com/papers/hpoas.pdf
CVE ID: CVE-2002-1637 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/972 - http://www.kb.cert.org/vuls/id/712723 - http://www.nextgenss.com/papers/hpoas.pdf - https://exchange.xfo
abilities/972 - http://www.kb.cert.org/vuls/id/712723 - http://www.nextgenss.com/papers/hpoas.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/970
CVE ID: CVE-2002-1638 State: REJECTED Published: 2005-03-28T05:00:00 Last Updated: 2007-10-18T09:00:00 Description: No description available.