Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0756 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:47.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9036.php - http://www.securityfocus.com/bid/4694 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0040.html
CVE ID: CVE-2002-0757 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:47.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9037.php - http://www.securityfocus.com/bid/4700 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-033.php
tic/9037.php - http://www.securityfocus.com/bid/4700 - http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-033.php - http://online.securityfocus.com/archive/1/271466
CVE ID: CVE-2002-0758 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4695 - http://www.iss.net/security_center/static/9040.php - http://www.novell.com/linux/security/advisories/2002_016_sysconfig_txt.html
CVE ID: CVE-2002-0759 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a bzip2 archive. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt - http://www.iss.net/security_center/static/9126.php - http://www.securityfocus.com/bid/4
/OpenLinux/CSSA-2002-039.0.txt - http://www.iss.net/security_center/static/9126.php - http://www.securityfocus.com/bid/4774 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc
CVE ID: CVE-2002-0760 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:47.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9127.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt - http://www.sec
.net/security_center/static/9127.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt - http://www.securityfocus.com/bid/4775 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc
CVE ID: CVE-2002-0761 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9128.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-039.0.txt - http://www.securityfocus.com/bid/4776 - ftp://ftp.freebsd.org/pub/F
era.com/pub/security/OpenLinux/CSSA-2002-039.0.txt - http://www.securityfocus.com/bid/4776 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:25.bzip2.asc
CVE ID: CVE-2002-0762 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9102.php - http://www.securityfocus.com/bid/4757 - http://www.novell.com/linux/security/advisories/2002_17_shadow.html
CVE ID: CVE-2002-0763 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:47.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9038.php - http://www.securityfocus.com/bid/4690 - http://archives.neohapsis.com/archives/hp/2002-q2/0037.html
CVE ID: CVE-2002-0764 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4763 - http://www.phorum.org/ - http://archives.neohapsis.com/archives/bugtraq/2002-05/0153.html - http://www.iss.net/security_center/static/9107.php - http://archives.neohapsis.com
/archives/bugtraq/2002-05/0153.html - http://www.iss.net/security_center/static/9107.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0147.html
CVE ID: CVE-2002-0765 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.763Z Vendors: n/a Products: n/a Problem Types: n/a Description: sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's password. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-05/0235.html - http://www.iss.net/security_center/static/9215.php - http://www.openbsd.org/errata.html#sshbsdauth - http://www.osvdb.org/5113 - http://www.securityfocus.com/bid/4803
CVE ID: CVE-2002-0766 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/271702 - http://www.iss.net/security_center/static/9048.php - http://www.kb.cert.org/vuls/id/314963
yfocus.com/archive/1/271702 - http://www.iss.net/security_center/static/9048.php - http://www.kb.cert.org/vuls/id/314963 - http://www.osvdb.org/5715 - http://www.securityfocus.com/bid/4708 - http://www.osvdb.org/5114 - http://www.openbsd.org/errata.html#fdalloc2
CVE ID: CVE-2002-0767 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9357.php - http://www.securityfocus.com/bid/5001 - http://online.securityfocus.com/archive/1/276739
CVE ID: CVE-2002-0768 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9130.php - http://www.novell.com/linux/security/advisories/2002_18_lukemftp.html
CVE ID: CVE-2002-0769 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4711 - http://www.iss.net/security_center/static/9056.php - http://www.cisco.com/warp/public/707/ata186-pa
focus.com/bid/4711 - http://www.iss.net/security_center/static/9056.php - http://www.cisco.com/warp/public/707/ata186-password-disclosure.shtml - http://www.iss.net/security_center/static/9057.php - http://www.securityfocus.com/bid/4712 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0083.html
CVE ID: CVE-2002-0770 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated using "say $rcon_password." Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9095.php - http://online.securityfocus.com/archive/1/272548 - http://www.kb.cert.org/vuls/id/970915
curity_center/static/9095.php - http://online.securityfocus.com/archive/1/272548 - http://www.kb.cert.org/vuls/id/970915 - http://www.osvdb.org/11187 - http://www.quakesrc.org/forum/topicDisplay.php?topicID=160 - http://www.securityfocus.com/bid/4744
CVE ID: CVE-2002-0771 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:47.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9112.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0161.html - http://www.securityfocus.com/bid/4818
CVE ID: CVE-2002-0772 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9104.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0142.html - http://www.securityfocus.com/bid/4759
CVE ID: CVE-2002-0773 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-05/0142.html - http://www.iss.net/security_center/static/9105.php - http://www.securityfocus.com/bid/4761
CVE ID: CVE-2002-0774 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-05/0168.html - http://www.iss.net/security_center/static/9131.php - http://www.securityfocus.com/bid/4779
CVE ID: CVE-2002-0775 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-05/0168.html - http://hostingcontroller.com/english/logs/sp2log.html - http://www.hostingcontroller.com/english/patches/ForAll/download/drivebrowse.zip
CVE ID: CVE-2002-0776 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:47.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix. Additional Analyst Notes: - CVE Program Container: References: - http://hostingcontroller.com/english/logs/sp2log.html - http://www.iss.net/security_center/static/9554.php - http://www.securityfocus.com/bid/5229 - http://online.securityfocus.com/archive/1/282129
CVE ID: CVE-2002-0777 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:47.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9116.php - http://www.securityfocus.com/bid/4780 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0172.html
CVE ID: CVE-2002-0778 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:47.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/transparentcache-tcp-relay-vuln-pub.shtml - http://www.iss.net/security_center/static/9082.php - http://www.securityfocus.com/bid/4751
CVE ID: CVE-2002-0779 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/271475 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html - http://www.securityfocus.com/bid/4696 - http://www.iss.net/security_center/static/9031.php
CVE ID: CVE-2002-0780 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to ABEND. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/271475 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html - http://www.iss.net/security_center/static/9032.php - http://www.securityfocus.com/bid/4697
CVE ID: CVE-2002-0781 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/271475 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0060.html - http://www.securityfocus.com/bid/4698 - http://www.iss.net/security_center/static/9033.php
CVE ID: CVE-2002-0782 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public interface. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/271957 - http://www.iss.net/security_center/static/9062.php - http://www.securityfocus.com/bid/4726
CVE ID: CVE-2002-0783 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9096.php - http://archives.neohapsis.com/archives/bugtraq/2002-05/0117.html - http://www.securityfocus.com/bid/4745
CVE ID: CVE-2002-0784 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot). Additional Analyst Notes: - CVE Program Container: References: - http://www.lysias.de/send/news/index.php?page=3 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0039.html - http://www.iss.net/security_center/static/9028.php - http://www.securityfocus.com/bid/4691
CVE ID: CVE-2002-0785 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/5109 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0086.html - http://www.iss.net/security_center/static/9058.php - http://www.securityfocus.com/bid/4709 - http://www.kb.cert.org/vuls/id/259435
CVE ID: CVE-2002-0786 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html - http://www.iss.net/security_center/static/9054.php - http://www.securityfocus.com/bid/4718
CVE ID: CVE-2002-0787 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0068.html - http://www.securityfocus.com/bid/4717 - http://www.iss.net/security_center/static/9053.php
CVE ID: CVE-2002-0788 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information. Additional Analyst Notes: - CVE Program Container: References: - http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1/hotfix/ReadMe.txt - http://www.securityfocus.com/bid/4702 - htt
oducts/licensed/pgp/desktop_security/windows/version_7.1/hotfix/ReadMe.txt - http://www.securityfocus.com/bid/4702 - http://www.osvdb.org/4363 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0052.html - http://www.iss.net/security_center/static/9044.php
CVE ID: CVE-2002-0789 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4724 - http://www.iss.net/security_center/static/9060.php - http://www.mnogosearch.org/history.html#log31 - http://www.mnogosearch.org/Download/mnogosearch-3.1.20.tar.gz - http://archives.neohapsis.com/archives/bugtraq/2002-05/0092.html
CVE ID: CVE-2002-0790 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://techsupport.services.ibm.com/server/aix.uhuic_getrec?args=DVsteamboat.boulder.ibm.com+DBAIX2+DA6854+STIY24556+USbin