Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-0791 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:49.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length. Additional Analyst Notes: - CVE Program Container: References: - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2962252.htm - http://www.securityfocus.com/bid/4693 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0059.html - http://online.securityfocus.com/archive/1
id/4693 - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0059.html - http://online.securityfocus.com/archive/1/271589 - http://www.iss.net/security_center/static/9034.php
CVE ID: CVE-2002-0792 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/330275 - http://www.securityfocus.com/bid/4747 - http://www.kb.cert.org/vuls/id/686939 - http://www.securityfocus.com/bid/4748 - http://www.cisco.com/warp/public/707/css-http-post-pub.shtml - http://www.iss.net/security_center/st
ocus.com/bid/4748 - http://www.cisco.com/warp/public/707/css-http-post-pub.shtml - http://www.iss.net/security_center/static/9083.php
CVE ID: CVE-2002-0793 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4901 - http://www.securityfocus.com/bid/4902 - http://www.securityfocus.com/bid/4904 - http://archives.neohapsis.com/archives/bugtraq/2002-05/029
yfocus.com/bid/4902 - http://www.securityfocus.com/bid/4904 - http://archives.neohapsis.com/archives/bugtraq/2002-05/0292.html - http://www.iss.net/security_center/static/9231.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/9234 - http://www.securityfocus.com/bid/4903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9233
CVE ID: CVE-2002-0794 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service (network service availability) via a large number of connection attempts, which fills the queue. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9209.php - http://www.securityfocus.com/bid/4879 - http://www.osvdb.org/5081 - http://archives.neohapsis.com/archives/freebsd/
hp - http://www.securityfocus.com/bid/4879 - http://www.osvdb.org/5081 - http://archives.neohapsis.com/archives/freebsd/2002-05/0349.html
CVE ID: CVE-2002-0795 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9217.php - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:27.rc.asc - http://www.osvdb.org/5083 - http://www.securityfocus.com/bid/4880
CVE ID: CVE-2002-0796 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102321107714554&w=2 - http://www.iss.net/security_center/static/9241.php - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A114 - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/219 - https://oval.cisecurity.org/repository/search/definition
olve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/219 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11 - http://www.securityfocus.com/bid/4932
CVE ID: CVE-2002-0797 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4933 - http://marc.info/?l=bugtraq&m=102321107714554&w=2 - http://www.iss.net/security_center/static/9242.php - http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/219 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A62 - https://oval.cisecurity.
9 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A62 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A94
CVE ID: CVE-2002-0798 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5623 - http://www.securityfocus.com/bid/4886 - http://archives.neohapsis.com/archives/hp/2002-q2/0059.html - http://www.iss.net/security_center/static/9207.php
CVE ID: CVE-2002-0799 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9132.php - http://online.securityfocus.com/archive/1/273512 - http://www.securityfocus.com/bid/4789
CVE ID: CVE-2002-0800 State: PUBLISHED Published: 2002-07-26T04:00:00 Last Updated: 2024-08-08T03:03:48.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4912 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0003.html - http://www.iss.net/security_center/static/9239.php
CVE ID: CVE-2002-0801 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4873 - http://online.securityfocus.com/archive/1/274528 - http://online.securityfocus.com/archive/1/274601 - http://www.osvdb.org/5082 - http://www.cert.org/advisories/CA-2002-14.html - http://www.iss.net/security_center/sta
01 - http://www.osvdb.org/5082 - http://www.cert.org/advisories/CA-2002-14.html - http://www.iss.net/security_center/static/9194.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0085.html - http://www.kb.cert.org/vuls/id/703835
CVE ID: CVE-2002-0802 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=postgresql-general&m=102032794322362 - http://www.redhat.com/support/errata/RHSA-2002-149.html - http://www.iss.net/security_center/static/10328.php
CVE ID: CVE-2002-0803 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T03:03:49.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A05.asc - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc - http://www.securityfocus.com/bid/4964 - http://bugzilla.mozilla.org/show_bug.cgi?id=126801 - http://archives.neohapsis.com/archives/bugtraq/2002-06/005
d/4964 - http://bugzilla.mozilla.org/show_bug.cgi?id=126801 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://www.iss.net/security_center/static/9300.php
CVE ID: CVE-2002-0804 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4964 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://www.osvdb.org/6394 - http://www.redhat.com/support/errata/RHSA-2002-109.html - http://bugzilla.mozilla.org/show_bug.cgi?id=129466 - http
94 - http://www.redhat.com/support/errata/RHSA-2002-109.html - http://bugzilla.mozilla.org/show_bug.cgi?id=129466 - http://www.iss.net/security_center/static/9301.php
CVE ID: CVE-2002-0805 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local users to modify the files and execute code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4964 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://www.iss.net/security_center/static/9302.php - http://www.osvdb.org/6395 - http://www.redhat.com/support/errata
- http://www.iss.net/security_center/static/9302.php - http://www.osvdb.org/6395 - http://www.redhat.com/support/errata/RHSA-2002-109.html - http://bugzilla.mozilla.org/show_bug.cgi?id=134575
CVE ID: CVE-2002-0806 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4964 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://bugzilla.mozilla.org/show_bug.cgi?id=141557 - http://www.redhat.com/support/errata/RHSA-2002-109.html - http://www.osvdb.org/5080 - http://www.iss.net/securit
41557 - http://www.redhat.com/support/errata/RHSA-2002-109.html - http://www.osvdb.org/5080 - http://www.iss.net/security_center/static/9303.php
CVE ID: CVE-2002-0807 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T03:03:48.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9304.php - http://www.securityfocus.com/bid/4964 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://bugzilla.mozilla.org/show_bug.cgi?id=146447
CVE ID: CVE-2002-0808 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:48.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4964 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://www.redhat.com/support/errata/RHSA-2002-109.html - http://www.iss.net/security_center/static/9305.php - http://bu
http://www.redhat.com/support/errata/RHSA-2002-109.html - http://www.iss.net/security_center/static/9305.php - http://bugzilla.mozilla.org/show_bug.cgi?id=107718
CVE ID: CVE-2002-0809 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4964 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://bugzilla.mozilla.org/show_bug.cgi?id=14
4964 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://bugzilla.mozilla.org/show_bug.cgi?id=148674 - http://www.iss.net/security_center/static/10141.php - http://www.redhat.com/support/errata/RHSA-2002-109.html
CVE ID: CVE-2002-0810 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc - http://www.securityfocus.com/bid/4964 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://www.iss.net/security_center/static/9306.php - http://www.os
es.neohapsis.com/archives/bugtraq/2002-06/0054.html - http://www.iss.net/security_center/static/9306.php - http://www.osvdb.org/6399 - http://bugzilla.mozilla.org/show_bug.cgi?id=92263 - http://www.redhat.com/support/errata/RHSA-2002-109.html
CVE ID: CVE-2002-0811 State: PUBLISHED Published: 2002-07-31T04:00:00 Last Updated: 2024-08-08T03:03:49.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozilla.org/show_bug.cgi?id=130821 - http://www.securityfocus.com/bid/4964 - http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html
CVE ID: CVE-2002-0812 State: PUBLISHED Published: 2002-08-10T04:00:00 Last Updated: 2024-08-08T03:03:49.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the identification string. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0066.html - http://www.iss.net/security_center/static/9810.php - http://archives.neohapsis.com/arc
ves/vulnwatch/2002-q3/0066.html - http://www.iss.net/security_center/static/9810.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0075.html - http://www.securityfocus.com/bid/5436
CVE ID: CVE-2002-0813 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9700.php - http://marc.info/?l=bugtraq&m=103002169829669&w=2 - http://online.securityfocus.com/archive/1/284634 - http://www.cisco.com/warp/public/707/ios-tftp-long-filename-pub.shtml - http://www.securityfocus.com/bid/5328 - ht
634 - http://www.cisco.com/warp/public/707/ios-tftp-long-filename-pub.shtml - http://www.securityfocus.com/bid/5328 - http://www.osvdb.org/854
CVE ID: CVE-2002-0814 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/download/gsx_security.html - http://www.iss.net/security_center/static/9663.php - http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0057.html - http://marc.info/?l=bugtraq&m=102765223418716&w=2 - http://www.securityfocus.com/bid/5294 - http://marc.info/?l=bugtraq
http://marc.info/?l=bugtraq&m=102765223418716&w=2 - http://www.securityfocus.com/bid/5294 - http://marc.info/?l=bugtraq&m=102752511030425&w=2
CVE ID: CVE-2002-0815 State: PUBLISHED Published: 2002-08-01T04:00:00 Last Updated: 2024-08-08T03:03:48.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain. Additional Analyst Notes: - CVE Program
wed because the document.domain of the two frames matches on the parent domain. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102798282208686&w=2 - http://marc.info/?l=bugtraq&m=102796732924658&w=2
CVE ID: CVE-2002-0816 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html - http://marc.info/?l=bugtraq&m=102709593117171&w=2 - http://www.iss.net/security_center/static/9640.php - http://www.securityfocus.com/bid/5272 - http://www.kb.cert.org/vuls/id/229867
CVE ID: CVE-2002-0817 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102812622416695&w=2 - http://www.iss.net/security_center/static/9741.php - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0045.html - http://www.securityfocus.com/bid/5367 - http://www.debian.org/security/2002/dsa-139
CVE ID: CVE-2002-0818 State: PUBLISHED Published: 2003-04-02T05:00:00 Last Updated: 2024-08-08T03:03:49.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9619.php - ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-048.0.txt - http://www.securityfocus.com/bid/5260 - http://archives.neohapsis.com/archives/bugtraq/2002-07/0194.html - http://www.debian.org/security/2002/dsa-144 - http://marc.
//archives.neohapsis.com/archives/bugtraq/2002-07/0194.html - http://www.debian.org/security/2002/dsa-144 - http://marc.info/?l=bugtraq&m=102821890317683&w=2
CVE ID: CVE-2002-0819 State: PUBLISHED Published: 2002-08-02T04:00:00 Last Updated: 2024-08-08T03:03:48.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the arts_fatal function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=102607688730228&w=2 - http://marc.info/?l=kde-multimedia&m=102607939232023&w=2 - http://marc.info/?l=vuln-dev&m=102614898620164&w=2
CVE ID: CVE-2002-0820 State: PUBLISHED Published: 2002-08-02T04:00:00 Last Updated: 2024-08-08T03:03:49.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&frame=right&th=d429cd2ef1d3a2b7&seekm=ai6c0q%242289%241%40FreeBSD.csie.NCTU.edu.tw#link16 - ftp://
lr=&ie=UTF-8&oe=UTF-8&frame=right&th=d429cd2ef1d3a2b7&seekm=ai6c0q%242289%241%40FreeBSD.csie.NCTU.edu.tw#link16 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc - http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0047.html - http://marc.info/?l=bugtraq&m=102979180524452&w=2