Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-2281 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6222 - http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/10711 - http://marc.info/?l=bugtraq&m=103798147613151&w=2
CVE ID: CVE-2002-2282 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0007.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10741 - http://www.securityfocus.com/bid/6288
CVE ID: CVE-2002-2283 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the "show processes from all users" privilege when the user is removed from the administrator group, which allows that user to view processes of other users. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0361.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10736 - http://www.securityfocus.com/bid/6280
CVE ID: CVE-2002-2284 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6223 - http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/10714 - http://marc.info/?l=bugtraq&m=103798147613151&w=2
CVE ID: CVE-2002-2285 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005740 - http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-12/0003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10770
CVE ID: CVE-2002-2286 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service (crash) via an empty HTTP request, which causes a null dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10816 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0081.html - http://www.securityfocus.com/bid/6339
CVE ID: CVE-2002-2287 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/6173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10617 - http://archives.neohapsis.com/archives/bugtraq/2002-11/0188.html
CVE ID: CVE-2002-2288 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10856 - http://www.securityfocus.com/bid/6387 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html
CVE ID: CVE-2002-2289 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10690 - http://www.securityfocus.com/bid/6243 - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0329.html - http://online.securityfocus.com/archive/1/300992 - http://securityreason.com/securityalert/3243
CVE ID: CVE-2002-2290 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10857 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html
CVE ID: CVE-2002-2291 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0090.html - http://securityreason.com/securityalert/3241 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10694 - http://www.securityfocus.com/bid/6238 - http://online.securityfocus.com/archive/1/300986
CVE ID: CVE-2002-2292 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request to port 9095. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10860 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0126.html - http://www.securityfocus.com/bid/6394
CVE ID: CVE-2002-2293 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webshots Desktop screensaver allows local users to bypass the password on the screensaver by pressing CTRL-ALT-DELETE and (1) hitting the cancel button or (2) killing the screensaver from the task manager. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10863 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0117.html - http://www.securityfocus.com/bid/6385
CVE ID: CVE-2002-2294 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service (service termination) via (1) malformed RealAudio (rad) packets that are not properly handled by the RealAudio Proxy, or (2) crafted packets to the statistics service (statsd). Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/20
). Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/avcenter/security/Content/2002.12.12.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10862 - http://www.securityfocus.com/bid/6389
CVE ID: CVE-2002-2295 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10783 - http://www.
t Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10783 - http://www.securiteam.com/securitynews/6Q0020A6AS.html - http://www.securityfocus.com/bid/6285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10734 - http://www.securityfocus.com/bid/6283 - http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0457.html - http://www.securityfocus.com/bid/6284 - http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-12/0005.html
CVE ID: CVE-2002-2296 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attackers to inject arbitrary web script or HTML via the num parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0003.html - http://www.securityfocus.com/bid/6272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10737
CVE ID: CVE-2002-2297 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10758 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html - http://securitytracker.com/id?1005733
CVE ID: CVE-2002-2298 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10758 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html - http://securitytracker.com/id?1005733
CVE ID: CVE-2002-2299 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10758 - http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html - http://securitytracker.com/id?1005733
CVE ID: CVE-2002-2300 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command. Additional Analyst Notes: - CVE Program Container: References: - http://www.secnap.com/alerts.php?pg=6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10739 - http://securitytracker.com/id?1005732 - http://marc.info/?l=bugtraq&m=103886644126011&w=2 - http://seclists.org/lists/bugtraq/2003/Apr/0344.html - http://securitytracker.com/id?1006760 - http://www.kb.c
011&w=2 - http://seclists.org/lists/bugtraq/2003/Apr/0344.html - http://securitytracker.com/id?1006760 - http://www.kb.cert.org/vuls/id/317417 - http://www.securityfocus.com/bid/6297
CVE ID: CVE-2002-2301 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/lists/bugtraq/2002/Dec/0012.html - http://www.securityfocus.com/bid/6293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/10742
CVE ID: CVE-2002-2302 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0018.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10746 - http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html - http://www.securityfocus.com/bid/6296 - http://www.trust-factory.com/TF20021004.html
CVE ID: CVE-2002-2303 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/10746 - http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html - http://securityreason.com/securityalert/3263 - http://www.securityfocus.com/archive/1/301863 - http://www.securit
html - http://securityreason.com/securityalert/3263 - http://www.securityfocus.com/archive/1/301863 - http://www.securityfocus.com/bid/6296
CVE ID: CVE-2002-2304 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-12/0134.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10864 - http://www.securityfocus.com/bid/6395
CVE ID: CVE-2002-2305 State: PUBLISHED Published: 2007-10-18T10:00:00 Last Updated: 2024-08-08T03:59:11.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-11/0307.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/10705
CVE ID: CVE-2002-2306 State: PUBLISHED Published: 2007-10-19T10:00:00 Last Updated: 2024-08-08T03:59:11.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service (CPU consumption) by sending several large messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9672 - http://online.securityfocus.com/archive/1/284315
CVE ID: CVE-2002-2307 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T17:14:51.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary services by connecting from source port 20. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5279 - http://www.aerasec.de/security/advisories/txt/ae-200207-028-BenHur-activeFTPruleset.txt - http://www.iss.net/security_center/static/9644.php
CVE ID: CVE-2002-2308 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T18:59:11.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000600.html - http://www.iss.net/security_center/static/9645.php
CVE ID: CVE-2002-2309 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-17T03:23:18.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/283586 - http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000605.html - http://www.iss.net/security_center/static/9646.php - http://www.securityfocus.com/bid/5280
CVE ID: CVE-2002-2310 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T23:10:29.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9648.php - http://securitytracker.com/id?1004825 - http://www.securiteam.com/securitynews/5DP0T0K7PY.html
CVE ID: CVE-2002-2311 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T20:02:17.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage. NOTE: it was reported that the vendor has disputed the severity of this issue. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/283866 - http://www.iss.net/security_center/static/9653.php - http://www.securityfocus.com/bid/5290
focus.com/archive/1/283866 - http://www.iss.net/security_center/static/9653.php - http://www.securityfocus.com/bid/5290 - http://online.securityfocus.com/archive/1/284068
CVE ID: CVE-2002-2312 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T22:44:53.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/283866 - http://online.securityfocus.com/archive/1/284096 - http://www.securityfocus.com/bid/5290
CVE ID: CVE-2002-2313 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T22:56:28.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary programs via an HTML email message containing a META refresh tag that references an embedded .mhtml file with ActiveX controls that execute a second embedded program, which is processed by Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000644.html - http://www.iss.net/security_center/static/9654.php
CVE ID: CVE-2002-2314 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-17T03:43:50.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9656.php - http://bugzilla.mozilla.org/show_bug.cgi?id=152725 - http://cert.uni-stuttgart.de/archive/bugtraq/2002/09/msg00230.html - http://www.mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html - http://seclists.org/bugtraq/2002/Jul/
30.html - http://www.mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html - http://seclists.org/bugtraq/2002/Jul/0260.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074 - http://www.securityfocus.com/bid/5293
CVE ID: CVE-2002-2315 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T22:09:28.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9129.php - http://online.securityfocus.com/archive/1/273488 - http://www.securityfocus.com/bid/4786 - http://online.securityfocus.com/archive/1/273421
CVE ID: CVE-2002-2316 State: PUBLISHED Published: 2007-10-26T19:00:00Z Last Updated: 2024-09-16T20:02:35.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-06/0209.html - http://www.securityfocus.com/bid/4790 - http://www.iss.net/security_center/static/9148.php - http://archives.neohapsi
- http://www.securityfocus.com/bid/4790 - http://www.iss.net/security_center/static/9148.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0190.html