Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1476 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in setlocale in libc on NetBSD 1.4.x through 1.6, and possibly other operating systems, when called with the LC_ALL category, allows local attackers to execute arbitrary code via a user-controlled locale string that has more than 6 elements, which exceeds the boundaries of the new_categories category array, as exploitable through programs such as xterm and zsh. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-012.txt.asc - http://
Program Container: References: - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-012.txt.asc - http://www.osvdb.org/7565 - http://www.securityfocus.com/bid/5724 - http://www.iss.net/security_center/static/10159.php
CVE ID: CVE-2002-1477 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10048.php - http://www.debian.org/security/2002/dsa-164 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html - http://www.securityfocus.com/bid/5627 - http://www.knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
CVE ID: CVE-2002-1478 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti before 0.6.8 allows attackers to execute arbitrary commands via the "Data Input" option in console mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2002/dsa-164 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html - http://www.securityfocus.com/bid/5630 - http://www.iss.net/security_center/static/10050.php - http://www.knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt
CVE ID: CVE-2002-1479 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0028.html - http://www.iss.net/security_center/static/10049.php - http://www.knights-of-the-routing-table.org/advisories/krt_001_20020903_cacti.txt - http://www.securityfocus.com/bid/5628
CVE ID: CVE-2002-1480 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5676 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0069.html - http://www.iss.net/security_center/static/10060.php
CVE ID: CVE-2002-1481 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0076.html - http://www.iss.net/security_center/static/10065.php - http://www.securityfocus.com/bid/5679
CVE ID: CVE-2002-1482 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0076.html - http://www.iss.net/security_center/static/10068.php - http://www.securityfocus.com/bid/5673
CVE ID: CVE-2002-1483 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot). Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10123.php - http://www.db4web.de/download/homepage/hotfix/readme_en.txt - http://archives.neohapsis.com/archives/bugtraq/2002-09/0197.html - http://www.securityfocus.com/bid/5723 -
adme_en.txt - http://archives.neohapsis.com/archives/bugtraq/2002-09/0197.html - http://www.securityfocus.com/bid/5723 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0124.html
CVE ID: CVE-2002-1484 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0125.html - http://archives.neohapsis.com/archives/bugtraq/2002-09/0201.html - http://www.iss.net/securi
lnwatch/2002-q3/0125.html - http://archives.neohapsis.com/archives/bugtraq/2002-09/0201.html - http://www.iss.net/security_center/static/10136.php - http://www.securityfocus.com/bid/5725
CVE ID: CVE-2002-1485 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service (crash) via certain strings such as "P > O < C". Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0282.html - http://www.securityfocus.com/bid/5783
CVE ID: CVE-2002-1486 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5777 - http://www.securityfocus.com/bid/5769 - http://www.securityfocu
r: References: - http://www.securityfocus.com/bid/5777 - http://www.securityfocus.com/bid/5769 - http://www.securityfocus.com/bid/5765 - http://www.iss.net/security_center/static/10151.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html - http://archives.neohapsis.com/archives/bugtraq/2002-09/0266.html - http://www.iss.net/security_center/static/10163.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0258.html - http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0139.html - http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0140.html - http://www.iss.net/security_center/static/10150.php
CVE ID: CVE-2002-1487 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html - http://www.securityfocus.com/bid/5775 - http://www.iss.net/security_center/static/10161.php
CVE ID: CVE-2002-1488 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) via a PART message with (1) a missing channel or (2) a channel that the Trillian user is not in. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html - http://www.securityfocus.com/bid/5776 - http://www.iss.net/security_center/static/10162.php
CVE ID: CVE-2002-1489 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0166.html - http://www.iss.net/security_center/static/10124.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0236.html - http://www.iss.net/security_center/static/10391.php - http://www.securityfocus.com/bid/
ives/bugtraq/2002-10/0236.html - http://www.iss.net/security_center/static/10391.php - http://www.securityfocus.com/bid/5710
CVE ID: CVE-2002-1490 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-007.txt.asc - http://www.osvdb.org/7566 - http://www.securityfocus.com/bid/5722 - http://www.iss.net/security_center/s
2-007.txt.asc - http://www.osvdb.org/7566 - http://www.securityfocus.com/bid/5722 - http://www.iss.net/security_center/static/10115.php
CVE ID: CVE-2002-1491 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml - http://www.securityfocus.com/bid/5736 - http://www.iss.net/security_center/static/10129.php - http://www.osvdb.org/7041
CVE ID: CVE-2002-1492 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10131.php - http://www.securityfocus.com/bid/5734 - http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml
CVE ID: CVE-2002-1493 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/12235 - http://www.securityfocus.com/bid/5728 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0132.html - http://archives.neohapsis.com/archives/bugtraq/2002-09/0198.html
CVE ID: CVE-2002-1494 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5618 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0026.html - http://www.iss.net/security_center/static/10029.php
CVE ID: CVE-2002-1495 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via (1) attached file names in the Read Mail feature, (2) text/html mails that are displayed in a pop-up window, and (3) certain malicious attributes within otherwise safe tags, such as onMouseOver. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0270.html - http://www.securityfocus.com/bid/5771 - http://www.iss.net/security_center/static/
/archives/bugtraq/2002-09/0270.html - http://www.securityfocus.com/bid/5771 - http://www.iss.net/security_center/static/10152.php
CVE ID: CVE-2002-1496 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10160.php - http://www.securityfocus.com/bid/5774 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0284.html - http://freshmeat.net/releases/97910/
CVE ID: CVE-2002-1497 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response. Additional Analyst Notes: - CVE Program Container: References: - http://freshmeat.net/releases/97910/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/10004 - http://www.securityfocus.com/bid/5603
CVE ID: CVE-2002-1498 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL containing .. sequences with "/" or "\" characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9981.php - http://www.securityfocus.com/bid/5590 - http://archives.neohapsis.com/archives/bugtraq/2002-08/0307.html
CVE ID: CVE-2002-1499 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10000.php - http://www.securityfocus.com/bid/5600 - http://sourceforge.net/tracker/index.php?func=detail&aid=602
/static/10000.php - http://www.securityfocus.com/bid/5600 - http://sourceforge.net/tracker/index.php?func=detail&aid=602711&group_id=12668&atid=112668 - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0097.html - http://online.securityfocus.com/archive/1/290021
CVE ID: CVE-2002-1500 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET(). Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-014.txt.asc - http://www.securityfocus.com/bid/5727 - http://www.iss.net/security_center/static/10114.php
CVE ID: CVE-2002-1501 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to cause a denial of service (crash) via multiple port scans to ports 15077 and 15078. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5703 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0141.html - http://www.enterasys.com/support/techtips/tk0659-9.html - http://www.iss.net/security_center/static/10096.php
CVE ID: CVE-2002-1502 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10078.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0131.html - http://www.securityfocus.com/bid/5700 - http://xbreaky.sourceforge.net/
CVE ID: CVE-2002-1503 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd, (2) afdcmd, (3) afd_ctrl, (4) init_afd, (5) mafd, (6) mon_ctrl, (7) show_olog, or (8) udc. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10036.php - http://www.securityfocus.com/bid/5626 - http://www.dwd.de/AFD/txt/CHANGES - http://archives.neohapsis.com/archives/bugtraq/2002-09/
securityfocus.com/bid/5626 - http://www.dwd.de/AFD/txt/CHANGES - http://archives.neohapsis.com/archives/bugtraq/2002-09/0029.html
CVE ID: CVE-2002-1504 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10051.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0045.html
CVE ID: CVE-2002-1505 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-09/0083.html - http://www.iss.net/security_center/static/10069.php - http://www.securityfocus.com/bid/5675
CVE ID: CVE-2002-1506 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated. Additional Analyst Notes: - CVE Program Container: References: - http://www.solucorp.qc.ca/changes.hc?projet=linuxconf&version=1.28r4 - http://www.securityfocus.com/bid/5585 - http://archives.neohapsis.com/archives/bugtraq/2002-08/0304.html - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0093.html - http://www.iss.net/security_cente
02-08/0304.html - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0093.html - http://www.iss.net/security_center/static/9980.php
CVE ID: CVE-2002-1507 State: PUBLISHED Published: 2003-03-18T05:00:00 Last Updated: 2024-08-08T03:26:28.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unreal Tournament 2003 (ut2003) clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0116.html - http://www.iss.net/security_center/static/10128.php
CVE ID: CVE-2002-1508 State: PUBLISHED Published: 2003-02-11T05:00:00 Last Updated: 2024-08-08T03:26:28.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/11288.php - http://www.redhat.com/support/errata/RHSA-2003-040.html - http://www.novell.com/linux/security/advisories/2002_047_openldap2.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:006 - http://www.debian.org/secur
/2002_047_openldap2.html - http://www.mandriva.com/security/advisories?name=MDKSA-2003:006 - http://www.debian.org/security/2003/dsa-227
CVE ID: CVE-2002-1509 State: PUBLISHED Published: 2004-09-01T04:00:00 Last Updated: 2024-08-08T03:26:28.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2003-058.html - http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:026 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=75418 - http://www.redhat.com/support/erra
ies?name=MDKSA-2003:026 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=75418 - http://www.redhat.com/support/errata/RHSA-2003-057.html