deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-0055
Published: 2002-03-08
Description: SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-669
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1274&w=2; http://www.iss.net/security_center/static/8307.php; http://www.securityfocus.com/bid/4204
CVE: CVE-2002-0056
Published: 2002-03-08
Description: Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8036&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]1329&w=2; http://www.kb.cert.org/vuls/id/619707
CVE: CVE-2002-0057
Published: 2002-03-08
Description: XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2001-12/0152.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8821&w=2; http://www.osvdb.org/3032
CVE: CVE-2002-0060
Published: 2002-03-08
Description: IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.
CVSS Score: 7.5 (HIGH)
References: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:041; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2051&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]9653&w=2
CVE: CVE-2002-0062
Published: 2002-03-08
Description: Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."
CVSS Score: 7.2 (HIGH)
CWE: CWE-120
References: http://www.debian.org/security/2002/dsa-113; http://www.iss.net/security_center/static/8222.php; http://www.redhat.com/support/errata/RHSA-2002-020.html
CVE: CVE-2002-0063
Published: 2002-03-08
Description: Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-008.0.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000471; http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html
CVE: CVE-2002-0067
Published: 2002-03-08
Description: Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc; http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464
CVE: CVE-2002-0068
Published: 2002-03-08
Description: Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc; http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464
CVE: CVE-2002-0069
Published: 2002-03-08
Description: Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service.
CVSS Score: 2.6 (LOW)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc; http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464
CVE: CVE-2002-0081
Published: 2002-03-08
Description: Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000468; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3351&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4338&w=2
CVE: CVE-2002-1619
Published: 2002-03-08
Description: Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).
CVSS Score: 5.0 (MEDIUM)
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY27310&apar=only; http://www.kb.cert.org/vuls/id/152955; https://exchange.xforce.ibmcloud.com/vulnerabilities/10127
CVE: CVE-2002-0058
Published: 2002-03-15
Description: Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4228&w=2; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013
CVE: CVE-2002-0059
Published: 2002-03-15
Description: The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-415
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-015.1.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000469; http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:022
CVE: CVE-2002-0070
Published: 2002-03-15
Description: Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7290&w=2; http://www.iss.net/security_center/static/8384.php; http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0203&L=ntbugtraq&F=P&S=&P=2404
CVE: CVE-2002-0080
Published: 2002-03-15
Description: rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.
CVSS Score: 2.1 (LOW)
CWE: CWE-269
References: http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt; http://www.iss.net/security_center/static/8463.php; http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3
CVE: CVE-2002-0082
Published: 2002-03-15
Description: The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000465; http://ftp.support.compaq.com/patches/.new/html/SSRT0817.shtml; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6936&w=2
CVE: CVE-2002-0083
Published: 2002-03-15
Description: Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-193
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc; ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc; ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt
CVE: CVE-2002-0084
Published: 2002-03-15
Description: Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.
CVSS Score: 7.2 (HIGH)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00416.html; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309; http://www.esecurityonline.com/advisories/eSO4198.asp
CVE: CVE-2002-0085
Published: 2002-03-15
Description: cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0047.html; http://online.securityfocus.com/archive/1/270122; http://www.esecurityonline.com/advisories/eSO4197.asp
CVE: CVE-2002-0086
Published: 2002-03-15
Description: Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.
CVSS Score: 7.2 (HIGH)
References: http://www-1.ibm.com/support/docview.wss?uid=swg21095569; http://www-1.ibm.com/support/docview.wss?uid=swg21100441; http://www.esecurityonline.com/advisories/eSO4124.asp
CVE: CVE-2002-0087
Published: 2002-03-15
Description: bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files.
CVSS Score: 2.1 (LOW)
References: http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21095671; http://www.esecurityonline.com/advisories/eSO4125.asp; http://www.securityfocus.com/bid/4318
CVE: CVE-2002-0088
Published: 2002-03-15
Description: Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.
CVSS Score: 7.2 (HIGH)
References: http://www.esecurityonline.com/advisories/eSO4123.asp; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A48; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A60
CVE: CVE-2002-0089
Published: 2002-03-15
Description: Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.
CVSS Score: 7.2 (HIGH)
References: http://online.securityfocus.com/archive/1/270122; http://www.esecurityonline.com/advisories/eSO2397.asp; http://www.iss.net/security_center/static/8954.php
CVE: CVE-2002-0090
Published: 2002-03-15
Description: Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0041.html; http://online.securityfocus.com/archive/1/270149; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/44842
CVE: CVE-2002-0091
Published: 2002-03-15
Description: Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0400.html; http://www.esecurityonline.com/advisories/eSO2408.asp; http://www.iss.net/security_center/static/8953.php
CVE: CVE-2002-0092
Published: 2002-03-15
Description: CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=vuln-dev&m=[PII_REDACTED]7321&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]4524&w=2; http://www.debian.org/security/2002/dsa-117
CVE: CVE-2002-0164
Published: 2002-03-15
Description: Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20021001-01-P; ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.14/CSSA-2002-SCO.14.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000529
CVE: CVE-2002-0076
Published: 2002-03-19
Description: Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/218; http://www.iss.net/security_center/static/8480.php; http://www.securityfocus.com/bid/4313
CVE: CVE-2002-0061
Published: 2002-03-21
Description: Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7358&w=2; http://online.securityfocus.com/archive/1/263927; http://www.apacheweek.com/issues/02-03-29#apache1324
CVE: CVE-2000-1210
Published: 2002-03-22
Description: Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0045&w=2; http://www.iss.net/security_center/static/4205.php; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0045&w=2
CVE: CVE-2001-1222
Published: 2002-03-25
Description: Plesk Server Administrator (PSA) 1.0 allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/7735.php; http://www.securityfocus.com/archive/1/246861; http://www.securityfocus.com/bid/3737
CVE: CVE-2002-0094
Published: 2002-03-25
Description: config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.
CVSS Score: 7.5 (HIGH)
References: http://bscw.gmd.de/WhatsNew.html; http://www.iss.net/security_center/static/7774.php; http://www.securityfocus.com/archive/1/248000
CVE: CVE-2002-0095
Published: 2002-03-25
Description: The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/7775.php; http://www.securityfocus.com/archive/1/248000; http://www.securityfocus.com/bid/3777
CVE: CVE-2002-0096
Published: 2002-03-25
Description: The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended.
CVSS Score: 7.2 (HIGH)
References: http://geeklog.sourceforge.net/index.php?topic=Security; http://www.iss.net/security_center/static/7780.php; http://www.securityfocus.com/archive/1/248367
CVE: CVE-2002-0097
Published: 2002-03-25
Description: Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.
CVSS Score: 7.5 (HIGH)
References: http://geeklog.sourceforge.net/index.php?topic=Security; http://online.securityfocus.com/archive/1/249443; http://www.iss.net/security_center/static/7869.php
CVE: CVE-2002-0098
Published: 2002-03-25
Description: Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4836&w=2; http://online.securityfocus.com/archive/1/249219; http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3787
CVE: CVE-2002-0099
Published: 2002-03-25
Description: Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4078&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]5479&w=2; http://www.iss.net/security_center/static/7786.php
CVE: CVE-2002-0100
Published: 2002-03-25
Description: AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0005.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5397&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]5474&w=2
CVE: CVE-2002-0101
Published: 2002-03-25
Description: Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8083&w=2; http://www.iss.net/security_center/static/7826.php; http://www.securityfocus.com/bid/3789
CVE: CVE-2002-0102
Published: 2002-03-25
Description: Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.
CVSS Score: 5.0 (MEDIUM)
References: http://otn.oracle.com/deploy/security/pdf/webcache2.pdf; http://www.securityfocus.com/bid/3760; http://www.securityfocus.com/bid/3762
CVE: CVE-2002-0103
Published: 2002-03-25
Description: An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7937&w=2; http://otn.oracle.com/deploy/security/pdf/webcache2.pdf; http://www.iss.net/security_center/static/7766.php
CVE: CVE-2002-0104
Published: 2002-03-25
Description: AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3486&w=2; http://www.iss.net/security_center/static/7832.php; http://www.securityfocus.com/bid/3806
CVE: CVE-2002-0105
Published: 2002-03-25
Description: CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2428&w=2; http://www.iss.net/security_center/static/7864.php; http://www.securityfocus.com/bid/3818
CVE: CVE-2002-0106
Published: 2002-03-25
Description: BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9269&w=2; http://www.iss.net/security_center/static/7808.php; http://www.securityfocus.com/bid/3816
CVE: CVE-2002-0107
Published: 2002-03-25
Description: Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1488&w=2; http://online.securityfocus.com/archive/1/254167; http://www.iss.net/security_center/static/7835.php
CVE: CVE-2002-0108
Published: 2002-03-25
Description: Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/249026; http://www.iss.net/security_center/static/7841.php; http://www.kb.cert.org/vuls/id/575619
CVE: CVE-2002-0109
Published: 2002-03-25
Description: Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1680&w=2; http://www.iss.net/security_center/static/7827.php; http://www.securityfocus.com/bid/3795
CVE: CVE-2002-0110
Published: 2002-03-25
Description: Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5154&w=2; http://www.iss.net/security_center/static/7855.php; http://www.kb.cert.org/vuls/id/245707
CVE: CVE-2002-0111
Published: 2002-03-25
Description: Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7501&w=2; http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3861; http://www.iss.net/security_center/static/7853.php
CVE: CVE-2002-0112
Published: 2002-03-25
Description: Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0010.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6812&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]5486&w=2
CVE: CVE-2002-0113
Published: 2002-03-25
Description: EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
CVSS Score: 4.6 (MEDIUM)
References: http://online.securityfocus.com/archive/1/249420; http://www.iss.net/security_center/static/7897.php; http://www.securityfocus.com/bid/3840