Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1639 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4433 - http://www.kb.cert.org/vuls/id/158323 - http://securitytracker.com/id?1003967 - http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html - https://exchange.xforce.ibmcloud.com/vulnerab
http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/8782
CVE ID: CVE-2002-1640 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/8781 - http://securitytracker.com/id?1003967 - http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html - http
http://securitytracker.com/id?1003967 - http://www.oracle.com/technology//deploy/security/htdocs/oconfigvul.html - http://www.securityfocus.com/bid/4430 - http://www.securityfocus.com/bid/4436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8780
CVE ID: CVE-2002-1641 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/291555 - http://www.securityfocus.com/bid/4856 - http://www.nextgenss.com/vna/ora-webcache.txt
CVE ID: CVE-2002-1642 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (data loss) via the VACUUM command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/11102 - http://www.securityfocus.com/bid/7657 - http://archives.postgresql.org/pgsql-announce/2002-10/msg00000.php - http://www.redhat.com/support/errata/RHSA-2003-001.html - http://www.kb.cert.org/vuls/id/891177
CVE ID: CVE-2002-1643 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.service.real.com/help/faq/security/bufferoverrun12192002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10916 - http://www.kb.cert.org/vuls/
y/bufferoverrun12192002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10916 - http://www.kb.cert.org/vuls/id/974689 - http://www.securityfocus.com/archive/1/304203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10915 - http://www.securityfocus.com/bid/6454 - http://www.securityfocus.com/bid/6456 - http://www.securityfocus.com/bid/6458 - http://www.nextgenss.com/advisories/realhelix.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/10917
CVE ID: CVE-2002-1644 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10710 - http://www.securityfocus.com/bid/6247 - http://www.ssh.com/company/newsroom/article/286/ - http://www.kb.cert.org/vuls/id/740619
CVE ID: CVE-2002-1645 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6263 - http://www.ssh.com/company/newsroom/article/287/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/10723 - http://www.kb.cert.org/vuls/id/140977
CVE ID: CVE-2002-1646 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/341187 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0204.html - http://www.ssh.com/company/newsroom/article/201/ - http://www.securityfocus.com/bid/4810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9163
ewsroom/article/201/ - http://www.securityfocus.com/bid/4810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9163 - http://www.ciac.org/ciac/bulletins/m-081.shtml - http://www.ssh.com/products/ssh/advisories/authentication.cfm
CVE ID: CVE-2002-1647 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=103176636403241&w=2 - http://marc.info/?l=bugtraq&m=103238514720237&w=2 - http://marc.info/?l=bugtraq&m=103177860017930&w=2 - http://www.kb.cert.org/vuls/id/603945
CVE ID: CVE-2002-1648 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified send_to and subject parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7989 - http://www.kb.cert.org/vuls/id/153043 - http://www.securityfocus.com/bid/3956 - http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html
CVE ID: CVE-2002-1649 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7989 - http://www.kb.cert.org/vuls/id/153043 - http://www.securityfocus.com/bid/3956 - http://archives.neohapsis.com/archives/bugtraq/2002-01/0310.html
CVE ID: CVE-2002-1650 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: The spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modified sqspell_command parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-01/0296.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/7990 - http://archives.neohapsis.com/archives/bugtraq/2002-01/0306.html
CVE ID: CVE-2002-1651 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the (1) vformat or (2) vfilter functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5102 - http://www.kb.cert.org/vuls/id/636431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9441
CVE ID: CVE-2002-1652 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6141 - http://www.kb.cert.org/vuls/id/185251 - http://www.securiteam.com/exploits/5TP0W005FE.html - http://securitytracker.com/id?1002395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10595
CVE ID: CVE-2002-1653 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/165099 - http://www.securityfocus.com/bid/8431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10618
CVE ID: CVE-2002-1654 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/AAMN-567NFX - http://www.securityfocus.com/bid/3831 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7845 - http://www.k
67NFX - http://www.securityfocus.com/bid/3831 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7845 - http://www.kb.cert.org/vuls/id/985347 - http://lists.virus.org/vulnwatch-0201/msg00008.html - http://www.procheckup.com/vulnerabilities/pr0105.html - http://www.securiteam.com/securitynews/5IP0G0060Q.html - http://securitytracker.com/id?1003157
CVE ID: CVE-2002-1655 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:56.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. Additional Analyst Notes: - CVE Program Container: References: - http://cert.uni-stuttgart.de/archive/vulnwatch/2002/01/msg00007.html - http://www.procheckup.com/security_info/vuln_pr0104.html - http://www.kb.cert.org/vuls/id/AAMN-567N48 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7842 - http://www.kb.cert.org/vuls/id/191763 - http://www.secu
48 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7842 - http://www.kb.cert.org/vuls/id/191763 - http://www.securityfocus.com/bid/3826
CVE ID: CVE-2002-1656 State: PUBLISHED Published: 2005-03-28T05:00:00 Last Updated: 2024-08-08T03:34:55.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/162723 - http://securitytracker.com/id?1003828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8465 - http://www.ifrance.com/kitetoua/tuto/x_holes.txt - http://www.securityfocus.com/bid/4283
CVE ID: CVE-2002-1657 State: PUBLISHED Published: 2005-04-22T04:00:00 Last Updated: 2025-01-16T18:07:04.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/20215 - http://marc.info/?l=bugtraq&m=111402558115859&w=2 - http://marc.info/?l=bugtraq&m=111403050902165&w=2 - http://archives.postgresql.org/pgsql-admin/2002-08/msg00253.php
CVE ID: CVE-2002-1658 State: PUBLISHED Published: 2005-04-27T04:00:00 Last Updated: 2024-08-08T03:34:55.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5993 - https://exchange.xforce.ibmcloud.com/vulnerabil
Program Container: References: - http://www.securityfocus.com/bid/5993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10414 - http://marc.info/?l=bugtraq&m=103480856102007&w=2 - https://sardonix.org/audit/apache-45.html
CVE ID: CVE-2002-1659 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T03:34:55.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10558 - http://securitytracker.com/id?1005541 - http://secunia.com/advisories/10465
CVE ID: CVE-2002-1660 State: PUBLISHED Published: 2005-05-10T04:00:00 Last Updated: 2024-08-08T03:34:55.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/exploits/5QP0P158AC.html - http://securitytracker.com/id?1005284 - http://www.securityfocus.com/bid/5820 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10176
CVE ID: CVE-2002-1661 State: PUBLISHED Published: 2005-05-05T04:00:00 Last Updated: 2024-08-08T03:34:55.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1005865 - http://secunia.com/advisories/7801 - http://secunia.com/advisories/7870 - http://leafnode.sourceforge.net/leafnode-SA-2002-01.txt - http://marc.info/?l=bugtraq&m=104127108823436&w=2 - http://marc.info/?l=b
node.sourceforge.net/leafnode-SA-2002-01.txt - http://marc.info/?l=bugtraq&m=104127108823436&w=2 - http://marc.info/?l=bugtraq&m=104152295210075&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10942 - http://secunia.com/advisories/7799 - http://www.securityfocus.com/bid/6490 - http://www.mandriva.com/security/advisories?name=MDKSA-2003:005
CVE ID: CVE-2002-1662 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T03:34:55.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the "Your name" field during account registration. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10859 - http://www.securityfocus.com/bid/6386 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10854
CVE ID: CVE-2002-1663 State: PUBLISHED Published: 2005-05-19T04:00:00 Last Updated: 2024-08-08T03:34:55.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a POST request with an invalid or missing Content-Length header value. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0023.html - http://www.securityfocus.com/bid/6096 - http://secunia.com/advisories/7449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10529 - http://monkeyd.sourceforge.net/Changelog.txt - http:/
449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10529 - http://monkeyd.sourceforge.net/Changelog.txt - http://securitytracker.com/id?1005507
CVE ID: CVE-2002-1664 State: PUBLISHED Published: 2005-05-28T04:00:00 Last Updated: 2024-08-08T03:34:55.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-16.html - http://marc.info/?l=bugtraq&m=101439616623230&w=2 - http://www.kb.cert.org/vuls/id/393195
CVE ID: CVE-2002-1665 State: PUBLISHED Published: 2005-05-28T04:00:00 Last Updated: 2024-08-08T03:34:55.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long set_buddygrp field. Additional Analyst Notes: - CVE Program Container: References: - http://www.cert.org/advisories/CA-2002-16.html - http://marc.info/?l=bugtraq&m=101439616623230&w=2 - http://www.kb.cert.org/vuls/id/755755
CVE ID: CVE-2002-1666 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL. Additional Analyst Notes: - CVE Program Container: References: - http://otn.oracle.com/deploy/security/pdf/apps_alert_ebiz2.pdf - http://www.securityfocus.com/bid/4551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8897
CVE ID: CVE-2002-1667 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: The virtual memory management system in FreeBSD 4.5-RELEASE and earlier does not properly check the existence of a VM object during page invalidation, which allows local users to cause a denial of service (crash) by calling msync on an unaccessed memory map created with MAP_ANON and MAP_NOSYNC flags. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:22.mmap.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/8921
CVE ID: CVE-2002-1668 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a "file system weakness" that is possibly via an mmap() system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/advisories/3770 - http://www.securityfocus.com/bid/3817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7844
CVE ID: CVE-2002-1669 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: pkg_add in FreeBSD 4.2 through 4.4 creates a temporary directory with world-searchable permissions, which may allow local users to modify world-writable parts of the package during installation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7852 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:01.pkg_add.asc
CVE ID: CVE-2002-1670 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explorer unpatched. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/7922 - http://www.securityfocus.com/bid/3887 - http://online.securityfocus.com/archive/1/250596
CVE ID: CVE-2002-1671 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of the clipboardData object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/3862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/7906 - http://www.securityfocus.com/archive/1/250248 - http://online.securityfocus.com/archive/1/250387/2002-10-11/2002-10-17/2
CVE ID: CVE-2002-1672 State: PUBLISHED Published: 2005-06-21T04:00:00 Last Updated: 2024-08-08T03:34:55.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials. Additional Analyst Notes: - CVE Program Container: References: - http://www.webmin.com/changes.html - http://www.securityfocus.com/bid/4328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/8595 - http://online.securityfocus.com/archive/1/263181