deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-2360
Published: 2002-12-31
Description: The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-08/0403.html; http://www.iss.net/security_center/static/9983.php; http://www.securiteam.com/unixfocus/5CP0R1P80G.html
CVE: CVE-2002-2361
Published: 2002-12-31
Description: The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00384.html; http://www.iss.net/security_center/static/9984.php; http://www.securityfocus.com/bid/5579
CVE: CVE-2002-2362
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.iss.net/security_center/static/10470.php; http://www.securityfocus.com/archive/1/296861; http://www.securityfocus.com/bid/6035
CVE: CVE-2002-2363
Published: 2002-12-31
Description: VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/hp/2002-q3/0064.html; http://www.iss.net/security_center/static/9993.php; http://www.securityfocus.com/bid/5583
CVE: CVE-2002-2364
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.iss.net/security_center/static/9452.php; http://www.securityfocus.com/bid/5124; http://www.iss.net/security_center/static/9452.php
CVE: CVE-2002-2365
Published: 2002-12-31
Description: Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "|" (pipe) character.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0390.html; http://www.iss.net/security_center/static/9453.php; http://www.securityfocus.com/bid/5127
CVE: CVE-2002-2366
Published: 2002-12-31
Description: Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0334.html; http://www.iss.net/security_center/static/9999.php; http://www.securityfocus.com/bid/5601
CVE: CVE-2002-2367
Published: 2002-12-31
Description: Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html; http://www.iss.net/security_center/static/9484.php; http://www.securityfocus.com/bid/5149
CVE: CVE-2002-2368
Published: 2002-12-31
Description: Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0033.html; http://www.iss.net/security_center/static/9485.php; http://www.securityfocus.com/bid/5145
CVE: CVE-2002-2369
Published: 2002-12-31
Description: Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-10/0372.html; http://www.iss.net/security_center/static/10468.php; http://www.securityfocus.com/bid/6042
CVE: CVE-2002-2370
Published: 2002-12-31
Description: SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request that does not end with a newline.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0011.html; http://www.iss.net/security_center/static/10005.php; http://www.securityfocus.com/bid/5664
CVE: CVE-2002-2371
Published: 2002-12-31
Description: Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containing the device's hardware address as the source MAC address in the DLC header.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0045.html; http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00375.html; http://www.iss.net/security_center/static/10472.php
CVE: CVE-2002-2372
Published: 2002-12-31
Description: The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial of service (crash) via a long username, possibly due to a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0364.html; http://www.iss.net/security_center/static/10474.php; http://www.securityfocus.com/bid/6047
CVE: CVE-2002-2373
Published: 2002-12-31
Description: The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which allows remote attackers to gain access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16
References: http://www.iss.net/security_center/static/10476.php; http://www.securityfocus.com/archive/1/297250; http://www.securityfocus.com/bid/6052
CVE: CVE-2002-2374
Published: 2002-12-31
Description: Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."
CVSS Score: 10.0 (HIGH)
CWE: CWE-59, CWE-362
References: http://sunsolve.sun.com/search/document.do?assetkey=1-21-113176-01-1&searchclause=113176; http://www.securityfocus.com/bid/5540; http://sunsolve.sun.com/search/document.do?assetkey=1-21-113176-01-1&searchclause=113176
CVE: CVE-2002-2375
Published: 2002-12-31
Description: Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL.  NOTE: it is not clear whether this issue reveals any more information regarding directory structure than is already available to any CommuniGate Pro user, although there is a possibility that it could be used to infer product version information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0016.html; http://www.iss.net/security_center/static/9463.php; http://archives.neohapsis.com/archives/bugtraq/2002-07/0016.html
CVE: CVE-2002-2376
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name, (2) email, (3) homepage, and (4) location parameters.  NOTE: this issue might overlap CVE-2005-1605.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0388.html; http://www.iss.net/security_center/static/9469.php; http://www.iss.net/security_center/static/9470.php
CVE: CVE-2002-2377
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://online.securityfocus.com/archive/1/279707; http://www.iss.net/security_center/static/9471.php; http://www.iss.net/security_center/static/9472.php
CVE: CVE-2002-2378
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00387.html; http://www.iss.net/security_center/static/10487.php; http://www.securityfocus.com/bid/6054
CVE: CVE-2002-2379
Published: 2002-12-31
Description: Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor
CVSS Score: 7.8 (HIGH)
CWE: CWE-310
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00397.html; http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00411.html; http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00413.html
CVE: CVE-2002-2380
Published: 2002-12-31
Description: NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-200
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00416.html; http://www.iss.net/security_center/static/10498.php; http://www.securityfocus.com/bid/6064
CVE: CVE-2002-2381
Published: 2002-12-31
Description: Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remote attackers to casue a denial of service and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://gtetrinet.sourceforge.net/; http://securitytracker.com/id?1005497; http://www.debian.org/security/2002/dsa-205
CVE: CVE-2002-2382
Published: 2002-12-31
Description: cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.
CVSS Score: 7.2 (HIGH)
CWE: CWE-59
References: http://archives.neohapsis.com/archives/freebsd/2002-11/0011.html; http://www.iss.net/security_center/static/10610.php; http://www.securityfocus.com/bid/6150
CVE: CVE-2002-2383
Published: 2002-12-31
Description: SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/5123; https://exchange.xforce.ibmcloud.com/vulnerabilities/9596; http://www.securityfocus.com/bid/5123
CVE: CVE-2002-2384
Published: 2002-12-31
Description: hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service.
CVSS Score: 3.6 (LOW)
CWE: CWE-255
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html; http://www.iss.net/security_center/static/10591.php; http://www.securityfocus.com/bid/6155
CVE: CVE-2002-2385
Published: 2002-12-31
Description: Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0115.html; http://www.iss.net/security_center/static/10593.php; http://www.securityfocus.com/bid/6156
CVE: CVE-2002-2386
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0131.html; http://www.blocus-zone.com/modules/news/article.php?storyid=180; http://www.iss.net/security_center/static/10594.php
CVE: CVE-2002-2387
Published: 2002-12-31
Description: Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0069.html; http://www.iss.net/security_center/static/10599.php; http://www.mollensoft.com/news.htm
CVE: CVE-2002-2388
Published: 2002-12-31
Description: Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0070.html; http://www.iss.net/security_center/static/10601.php; http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0070.html
CVE: CVE-2002-2389
Published: 2002-12-31
Description: TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000138.html; http://securitytracker.com/id?1004799; http://www.iss.net/security_center/static/9624.php
CVE: CVE-2002-2390
Published: 2002-12-31
Description: Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0206.html; http://archives.neohapsis.com/archives/bugtraq/2002-09/0224.html; http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001890.html
CVE: CVE-2002-2391
Published: 2002-12-31
Description: SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0136.html; http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00258.html; http://www.iss.net/security_center/static/10606.php
CVE: CVE-2002-2392
Published: 2002-12-31
Description: Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.
CVSS Score: 6.4 (MEDIUM)
References: http://seclists.org/bugtraq/2002/Jul/0205.html; http://www.iss.net/security_center/static/9630.php; http://www.securityfocus.com/bid/5266
CVE: CVE-2002-2393
Published: 2002-12-31
Description: Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service (no new connections) via a series of MKD commands.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0109.html; http://www.iss.net/security_center/static/10573.php; http://www.securityfocus.com/bid/6112
CVE: CVE-2002-2394
Published: 2002-12-31
Description: InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www.iss.net/security_center/static/10106.php; http://www.securityfocus.com/archive/1/291538; http://www.securityfocus.com/bid/5697
CVE: CVE-2002-2395
Published: 2002-12-31
Description: InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www.iss.net/security_center/static/10107.php; http://www.securityfocus.com/archive/1/291538; http://www.securityfocus.com/bid/5701
CVE: CVE-2002-2396
Published: 2002-12-31
Description: Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.iss.net/security_center/static/10142.php; http://www.netric.org/advisories/netric-adv010.txt; http://www.securityfocus.com/bid/5760
CVE: CVE-2002-2397
Published: 2002-12-31
Description: Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network address of 127.0.0.0.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://www.derkeiler.com/Mailing-Lists/VulnWatch/2002-09/0015.html; http://www.iss.net/security_center/static/10108.php; http://www.securiteam.com/windowsntfocus/5WP0I2A8AI.html
CVE: CVE-2002-2398
Published: 2002-12-31
Description: The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/299536; http://securityreason.com/securityalert/3332; http://www.iss.net/security_center/static/10611.php
CVE: CVE-2002-2399
Published: 2002-12-31
Description: Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0150.html; http://www.iss.net/security_center/static/10612.php; http://www.securityfocus.com/bid/6170
CVE: CVE-2002-2400
Published: 2002-12-31
Description: Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0305.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1860&w=2; http://www.iss.net/security_center/static/10615.php
CVE: CVE-2002-2401
Published: 2002-12-31
Description: NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0211.html; http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B319458; http://www.abtrusion.com/msexe16.asp
CVE: CVE-2002-2402
Published: 2002-12-31
Description: SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a default SNMP read/write community string of "secret," which allows remote attackers to read and modify router configuration information.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2519&w=2; http://www.iss.net/security_center/static/10621.php; http://www.securityfocus.com/bid/6176
CVE: CVE-2002-2403
Published: 2002-12-31
Description: Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html; http://securityreason.com/securityalert/3331; http://www.iss.net/security_center/static/10622.php
CVE: CVE-2002-2404
Published: 2002-12-31
Description: Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via a long request to the POP3 port (TCP port 110).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2720&w=2; http://www.iss.net/security_center/static/10632.php; http://www.securityfocus.com/bid/6183
CVE: CVE-2002-2405
Published: 2002-12-31
Description: Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0219.html; http://www.iss.net/security_center/static/10139.php; http://www.securityfocus.com/bid/5744
CVE: CVE-2002-2406
Published: 2002-12-31
Description: Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0075.html; http://www.iss.net/security_center/static/10644.php; http://www.securityfocus.com/bid/6192
CVE: CVE-2002-2407
Published: 2002-12-31
Description: Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bin/shutdown, (3) /sbin/fs-pkg, and (4) phshutdown by QNX experimental patches, (5) cpim, (6) vpim, (7) phrelaycfg, and (8) columns, (9) othello, (10) peg, (11) solitaire, and (12) vpoker in the games pack 2.0.3, which allows local users to gain privileges by modifying the files before permissions are changed.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0255.html; http://www.iss.net/security_center/static/10656.php; http://www.securityfocus.com/bid/6206
CVE: CVE-2002-2408
Published: 2002-12-31
Description: Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1005650; http://www.gordano.com/kb.htm?q=1709; http://www.iss.net/security_center/static/10657.php
CVE: CVE-2002-2409
Published: 2002-12-31
Description: Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID.
CVSS Score: 3.5 (LOW)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0267.html; http://www.iss.net/security_center/static/10658.php; http://www.securityfocus.com/bid/6207
CVE: CVE-2002-2410
Published: 2002-12-31
Description: openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0278.html; http://www.iss.net/security_center/static/10684.php; http://www.securityfocus.com/bid/6232
CVE: CVE-2002-2411
Published: 2002-12-31
Description: Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://seclists.org/lists/bugtraq/2002/May/0183.html; http://www.securityfocus.com/bid/4782; https://exchange.xforce.ibmcloud.com/vulnerabilities/9115
CVE: CVE-2002-2412
Published: 2002-12-31
Description: Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://online.securityfocus.com/archive/1/273257; http://www.iss.net/security_center/static/9114.php; http://www.securityfocus.com/bid/4781