Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0034 State: PUBLISHED Published: 2004-01-14T05:00:00Z Last Updated: 2024-09-17T03:24:02.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected. Additional Analyst Notes: - CVE Program Container: References: - http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399 - http://www.kb.cert.org/vuls/id/361065
CVE ID: CVE-2002-0035 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2002-0036 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T02:35:17.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-052.html - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt - http://www.redhat.com/support/errata/RHSA-2003-051.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-20
http://www.redhat.com/support/errata/RHSA-2003-051.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:043 - http://www.osvdb.org/4896 - http://www.securityfocus.com/bid/6713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/11190 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000639 - http://www.kb.cert.org/vuls/id/587579 - http://www.redhat.com/support/errata/RHSA-2003-168.html
CVE ID: CVE-2002-0037 State: PUBLISHED Published: 2002-04-12T04:00:00 Last Updated: 2024-08-08T02:35:17.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10095.php - http://archives.neohapsis.com/archives/bugtraq/2001-09/0150.html - http://archives.neohapsis.com/archives/bugtraq/2001-09/0147.html - http://www.kb.cert.org/vuls/id/657899
CVE ID: CVE-2002-0038 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20020102-01-I - ftp://patches.sgi.com/support/free/security/advisories/20020102-02-I - http://www.securityfocus.com/bid/3882 - ftp://patches.sgi.com/support/free/security/advisories/20020102-03-P - https:/
- http://www.securityfocus.com/bid/3882 - ftp://patches.sgi.com/support/free/security/advisories/20020102-03-P - https://exchange.xforce.ibmcloud.com/vulnerabilities/7907
CVE ID: CVE-2002-0039 State: PUBLISHED Published: 2002-03-30T05:00:00 Last Updated: 2024-08-08T02:35:17.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P
CVE ID: CVE-2002-0040 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P - http://www.securityfocus.com/bid/4388 - http://www.osvdb.org/2058 - http://www.iss.net/security_center/static/8669.php
CVE ID: CVE-2002-0041 State: PUBLISHED Published: 2002-04-12T04:00:00 Last Updated: 2024-08-08T02:35:17.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/8835.php - ftp://patches.sgi.com/support/free/security/advisories/20020401-01-P - http://www.securityfocus.com/bid/4499 - http://www.ciac.org/ciac/bulletins/m-067.shtml
CVE ID: CVE-2002-0042 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4511 - http://www.iss.net/security_center/static/8839.php - ftp://patches.sgi.com/support/free/security/advisories/20020402-01-P
CVE ID: CVE-2002-0043 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc - http://www.redhat.com/support/errata/RHSA-2002-013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7891 - http://www.securityfocus.com/advisories
RHSA-2002-013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7891 - http://www.securityfocus.com/advisories/3800 - http://www.securityfocus.com/bid/3871 - http://www.securityfocus.com/archive/1/250168 - http://marc.info/?l=bugtraq&m=101120193627756&w=2 - http://www.sudo.ws/sudo/alerts/postfix.html - http://www.novell.com/linux/security/advisories/2002_002_sudo_txt.html - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:003 - http://www.debian.org/security/2002/dsa-101 - http://www.redhat.com/support/errata/RHSA-2002-011.html - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000451
CVE ID: CVE-2002-0044 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/3818 - http://www.securityfocus.com/bid/3920 - http://www.redhat.com/support/errata/RHSA-2002-012.html - http://www.debian.org/security/2002/dsa-105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7932 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-010.php3
CVE ID: CVE-2002-0045 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs. Additional Analyst Notes: - CVE Program Container: References: - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-020 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000459 - http://www.redhat.com/support/errata/RHSA-2002-014.html - http://ww
conectiva.com.br/atualizacoes/?id=a&anuncio=000459 - http://www.redhat.com/support/errata/RHSA-2002-014.html - http://www.securityfocus.com/bid/3945 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-001.0.txt - http://www.osvdb.org/5395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7978 - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:013 - http://www.openldap.org/lists/openldap-announce/200201/msg00002.html
CVE ID: CVE-2002-0046 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7998 - http://www.osvdb.org/5394 - http://www.redhat.com/support/errata/RHSA-2002-007.html - http://www.securityfocus.com/archive/1/251418
CVE ID: CVE-2002-0047 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service (crash) via a short malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7883 - http://www.redhat.com/support/errata/RHSA-2002-007.html
CVE ID: CVE-2002-0048 State: PUBLISHED Published: 2002-02-18T05:00:00 Last Updated: 2024-08-08T02:35:17.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3958 - http://marc.info/?l=bugtraq&m=101223214906963&w=2 - http://www.linuxsecurity.com/advisories/other_advisory-1853.html - http://marc.info/?l=bugtraq&m=101223603321315&w=2 - http://distro.conect
urity.com/advisories/other_advisory-1853.html - http://marc.info/?l=bugtraq&m=101223603321315&w=2 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000458 - http://www.kb.cert.org/vuls/id/800635 - http://www.debian.org/security/2002/dsa-106 - http://lists.suse.com/archives/suse-security-announce/2002-Jan/0003.html - http://www.caldera.com/support/security/advisories/CSSA-2002-003.0.txt - http://www.iss.net/security_center/static/7993.php - http://www.redhat.com/support/errata/RHSA-2002-018.html - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:10.rsync.asc - http://online.securityfocus.com/advisories/3839 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-0
sync.asc - http://online.securityfocus.com/advisories/3839 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-009.php
CVE ID: CVE-2002-0049 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8092 - http://www.securityfocus.com/bid/4053 - http://www.osvdb.org/2042 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1022 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms0
nition/oval%3Aorg.mitre.oval%3Adef%3A1022 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-003
CVE ID: CVE-2002-0050 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-010 - http://www.securityfocus.com/bid/4157
CVE ID: CVE-2002-0051 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2025-01-16T17:12:31.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://online.securityfocus.com/archive/1/244329 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A38 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-016 - http://www.securityfocus.com/bid/4438
CVE ID: CVE-2002-0052 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-009 - http://www.osvdb.org/763 - http://www.securityfocus.com/bid/4158 - http://securitytracker.com/id?1003630
CVE ID: CVE-2002-0053 State: PUBLISHED Published: 2002-02-18T05:00:00 Last Updated: 2024-08-08T02:35:17.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request. NOTE: this candidate may be split or merged with other candidates. This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available. Additional Analyst Notes: - CVE Program Container: References: - http://cve.mitre.org/cgi-bin/cve
ormation is available. Additional Analyst Notes: - CVE Program Container: References: - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0013 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0012 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006 - http://www.cert.org/advisories/CA-2002-03.html - http://www.kb.cert.org/vuls/id/107186 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A402 - http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html - http://www.kb.cert.org/vuls/id/854306 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A209
CVE ID: CVE-2002-0054 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=101501580409373&w=2 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-011 - http://www.securityfocus.com/bid/4205
CVE ID: CVE-2002-0055 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-012 - http://www.securityfocus.com/bid/4204 - http://www.iss.net/security_center/static/8307.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A30 - h
y_center/static/8307.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A30 - http://marc.info/?l=bugtraq&m=101558498401274&w=2
CVE ID: CVE-2002-0056 State: PUBLISHED Published: 2002-02-21T05:00:00 Last Updated: 2024-08-08T02:35:17.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-007 - http://www.kb.cert.org/vuls/id/619707 - http://marc.info/?l=vuln-dev&m=101413924631329&w=2 - http://marc.info/?l=bugtraq&m=101422555428036&w=2 - http://www.securityfocus.com/bid/4135 - https://
1413924631329&w=2 - http://marc.info/?l=bugtraq&m=101422555428036&w=2 - http://www.securityfocus.com/bid/4135 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A271
CVE ID: CVE-2002-0057 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7712 - http://www.securityfocus.com/bid/3699 - http://archives.neohapsis.com/archives/bugtraq/2001-12/0152.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-008 -
archives/bugtraq/2001-12/0152.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-008 - http://www.osvdb.org/3032 - http://marc.info/?l=bugtraq&m=101366383408821&w=2
CVE ID: CVE-2002-0058 State: PUBLISHED Published: 2002-03-07T05:00:00 Last Updated: 2024-08-08T02:35:17.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microso
vulnerable versions of SDK or JDK. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216 - http://marc.info/?l=bugtraq&m=101534535304228&w=2
CVE ID: CVE-2002-0059 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-07.html - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:022 - http://www.securityfocus.com/bid/4267 - https://exch
p://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:022 - http://www.securityfocus.com/bid/4267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8427 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-030 - http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000469 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-023.php - http://www.debian.org/security/2002/dsa-122 - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-015.1.txt - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3 - http://www.kb.cert.org/vuls/id/368819 - http://www.redhat.com/support/errata/RHSA-2002-027.html - http://www.caldera.com/support/security/advi
/vuls/id/368819 - http://www.redhat.com/support/errata/RHSA-2002-027.html - http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-036 - http://www.redhat.com/support/errata/RHSA-2002-026.html - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-037
CVE ID: CVE-2002-0060 State: PUBLISHED Published: 2002-06-25T04:00:00 Last Updated: 2024-08-08T02:35:17.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/230307 - http://www.netfilter.org/security/2002-02-25-irc-dcc-mask.html - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0203-027 - http://frontal2.mandriva.
5-irc-dcc-mask.html - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0203-027 - http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:041 - http://marc.info/?l=vuln-dev&m=101486352429653&w=2 - http://marc.info/?l=bugtraq&m=101483396412051&w=2 - http://www.redhat.com/support/errata/RHSA-2002-028.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/8302 - http://www.securityfocus.com/bid/4188
CVE ID: CVE-2002-0061 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T02:35:17.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.apacheweek.com/issues/02-03-29#apache1324 - http://www.securityfocus.com/bid/4335 - http://www.iss.net/security_center/static/8589.php - http://marc.info/?l=bugtraq&m=1
://www.securityfocus.com/bid/4335 - http://www.iss.net/security_center/static/8589.php - http://marc.info/?l=bugtraq&m=101674082427358&w=2 - http://online.securityfocus.com/archive/1/263927 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E