deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-2148
Published: 2002-12-31
Description: Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard (UDP port 9) packet, which causes the device to leak the information in the response.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/284650; http://www.iss.net/security_center/static/9704.php; http://www.securityfocus.com/bid/5335
CVE: CVE-2002-2149
Published: 2002-12-31
Description: Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/284649; http://www.iss.net/security_center/static/9705.php; http://www.securityfocus.com/bid/5333
CVE: CVE-2002-2150
Published: 2002-12-31
Description: Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10449.php; http://www.kb.cert.org/vuls/id/539363; http://www.securityfocus.com/bid/6023
CVE: CVE-2002-2151
Published: 2002-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1651.  Reason: This candidate is a duplicate of CVE-2002-1651.  Notes: All CVE users should reference CVE-2002-1651 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2002-2152
Published: 2002-12-31
Description: The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.
CVSS Score: 10.0 (HIGH)
References: http://online.securityfocus.com/archive/1/296119; http://www.iss.net/security_center/static/10408.php; http://www.securityfocus.com/bid/6006
CVE: CVE-2002-2153
Published: 2002-12-31
Description: Format string vulnerability in the administrative pages of the PL/SQL module for Oracle Application Server 4.0.8 and 4.0.8 2 allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf; http://www.kb.cert.org/vuls/id/467555; http://www.nextgenss.com/vna/ora-ias.txt
CVE: CVE-2002-2154
Published: 2002-12-31
Description: Directory traversal vulnerability in Monkey HTTP Daemon 0.1.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0298.html; http://www.iss.net/security_center/static/10188.php; http://www.securityfocus.com/bid/5792
CVE: CVE-2002-2155
Published: 2002-12-31
Description: Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/9761.php; http://www.securityfocus.com/archive/1/285695; http://www.securityfocus.com/bid/5388
CVE: CVE-2002-2156
Published: 2002-12-31
Description: Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/285639; http://www.securityfocus.com/archive/1/285695; http://www.securityfocus.com/archive/1/285639
CVE: CVE-2002-2157
Published: 2002-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1660.  Reason: This candidate is a duplicate of CVE-2002-1660.  Notes: All CVE users should reference CVE-2002-1660 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2002-2158
Published: 2002-12-31
Description: zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/276121; http://www.iss.net/security_center/static/9312.php; http://www.securityfocus.com/bid/4973
CVE: CVE-2002-2159
Published: 2002-12-31
Description: Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access.
CVSS Score: 10.0 (HIGH)
References: http://www.iss.net/security_center/static/9330.php; http://www.securiteam.com/securitynews/5OP022K7GE.html; http://www.securityfocus.com/bid/4987
CVE: CVE-2002-2160
Published: 2002-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1798.  Reason: This candidate is a duplicate of CVE-2002-1798.  Notes: All CVE users should reference CVE-2002-1798 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2002-2161
Published: 2002-12-31
Description: Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU consumption) via a SYN packet flood.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/289119; http://www.iss.net/security_center/static/9963.php; http://www.securityfocus.com/bid/5570
CVE: CVE-2002-2162
Published: 2002-12-31
Description: Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.
CVSS Score: 4.6 (MEDIUM)
References: http://www.iss.net/security_center/static/10092.php; http://www.securityfocus.com/archive/1/291071; http://www.securityfocus.com/bid/5677
CVE: CVE-2002-2163
Published: 2002-12-31
Description: KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various methods, including a direct call to clear_cookies.php.
CVSS Score: 4.0 (MEDIUM)
References: http://www.ifrance.com/kitetoua/tuto/5holes5.txt; http://www.securityfocus.com/bid/4736; http://www.ifrance.com/kitetoua/tuto/5holes5.txt
CVE: CVE-2002-2164
Published: 2002-12-31
Description: Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HREF> link.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0082.html; http://online.securityfocus.com/archive/1/291058; http://www.iss.net/security_center/static/10067.php
CVE: CVE-2002-2165
Published: 2002-12-31
Description: The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox.
CVSS Score: 2.1 (LOW)
References: http://www.iss.net/security_center/static/9615.php; http://www.securitybugware.org/Other/5537.html; http://www.securityfocus.com/bid/5238
CVE: CVE-2002-2166
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary HTML and web script.
CVSS Score: 4.3 (MEDIUM)
References: http://www.iss.net/security_center/static/9637.php; http://www.securityfocus.com/bid/5236; http://www.iss.net/security_center/static/9637.php
CVE: CVE-2002-2167
Published: 2002-12-31
Description: Directory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences terminated by a null character in the $designNo variable, which is part of an "include" function call.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/282404; http://www.iss.net/security_center/static/9581.php; http://www.securityfocus.com/bid/5243
CVE: CVE-2002-2168
Published: 2002-12-31
Description: SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including function_describe_item1.inc.php.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/282404; http://www.123tkshop.org/index.php; http://www.iss.net/security_center/static/9582.php
CVE: CVE-2002-2169
Published: 2002-12-31
Description: Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/282443; http://www.iss.net/security_center/static/9616.php; http://www.mindflip.org/aim.html
CVE: CVE-2002-2170
Published: 2002-12-31
Description: Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/283418; http://www.iss.net/security_center/static/9642.php; http://www.securityfocus.com/bid/5276
CVE: CVE-2002-2171
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web script via a URL, possibly via a "%db" request in a URL.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0304.html; http://www.iss.net/security_center/static/10191.php; http://www.securityfocus.com/bid/5793
CVE: CVE-2002-2172
Published: 2002-12-31
Description: Informed (1) Designer and (2) Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information.
CVSS Score: 2.1 (LOW)
References: http://online.securityfocus.com/archive/1/293052; http://www.cirt.net/advisories/shana.shtml; http://www.iss.net/security_center/static/10192.php
CVE: CVE-2002-2173
Published: 2002-12-31
Description: Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/9764.php; http://www.securityfocus.com/archive/1/285695; http://www.securityfocus.com/bid/5389
CVE: CVE-2002-2174
Published: 2002-12-31
Description: The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, which allows remote attackers to create a denial of service (memory consumption) via a large number of connections.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0518.html; http://www.iss.net/security_center/static/9768.php; http://archives.neohapsis.com/archives/bugtraq/2002-07/0518.html
CVE: CVE-2002-2175
Published: 2002-12-31
Description: phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.
CVSS Score: 4.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1631&w=2; http://sourceforge.net/forum/forum.php?forum_id=188359; http://www.iss.net/security_center/static/9417.php
CVE: CVE-2002-2176
Published: 2002-12-31
Description: SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the User Profile page.
CVSS Score: 10.0 (HIGH)
References: http://online.securityfocus.com/archive/1/284691; http://www.iss.net/security_center/static/9692.php; http://www.securityfocus.com/bid/5342
CVE: CVE-2002-2177
Published: 2002-12-31
Description: BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.
CVSS Score: 2.6 (LOW)
References: http://dev2dev.bea.com/pub/advisory/38; http://www.iss.net/security_center/static/10221.php; http://www.securityfocus.com/bid/5819
CVE: CVE-2002-2178
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag.
CVSS Score: 4.3 (MEDIUM)
References: http://www.iss.net/security_center/static/10256.php; http://www.securityfocus.com/archive/1/293879; http://www.securityfocus.com/bid/5864
CVE: CVE-2002-2179
Published: 2002-12-31
Description: The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service (crash) via a TCP port scan using a tool such as nmap.
CVSS Score: 7.8 (HIGH)
References: http://www.iss.net/security_center/static/10260.php; http://www.securityfocus.com/archive/1/293881; http://www.securityfocus.com/archive/1/295837
CVE: CVE-2002-2180
Published: 2002-12-31
Description: The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.
CVSS Score: 6.8 (MEDIUM)
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/032_kerntime.patch; http://www.iss.net/security_center/static/10278.php; http://www.openbsd.org/plus32.html
CVE: CVE-2002-2181
Published: 2002-12-31
Description: SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10531.php; http://www.securityfocus.com/archive/1/297692; http://www.securityfocus.com/bid/6063
CVE: CVE-2002-2182
Published: 2002-12-31
Description: Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code via a long MSN packet.
CVSS Score: 6.4 (MEDIUM)
References: http://online.securityfocus.com/archive/1/276943; http://online.securityfocus.com/archive/1/276955; http://www.securityfocus.com/archive/1/276958
CVE: CVE-2002-2183
Published: 2002-12-31
Description: phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/5049; http://www.securityfocus.com/bid/5049
CVE: CVE-2002-2184
Published: 2002-12-31
Description: Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/5019; http://www.securityfocus.com/bid/5019
CVE: CVE-2002-2185
Published: 2002-12-31
Description: The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.
CVSS Score: 4.9 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20020901-01-A; http://online.securityfocus.com/archive/1/276968; http://secunia.com/advisories/18510
CVE: CVE-2002-2186
Published: 2002-12-31
Description: Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10570.php; http://www.macromedia.com/v1/Handlers/index.cfm?ID=23500; http://www.securityfocus.com/bid/6126
CVE: CVE-2002-2187
Published: 2002-12-31
Description: Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10571.php; http://www.macromedia.com/v1/Handlers/index.cfm?ID=23500; http://www.securityfocus.com/bid/6125
CVE: CVE-2002-2188
Published: 2002-12-31
Description: OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with invalid arguments, possibly due to an integer signedness error.
CVSS Score: 4.9 (MEDIUM)
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/018_kernresource.patch; http://www.iss.net/security_center/static/10572.php; http://www.openbsd.org/errata30.html#kernresource
CVE: CVE-2002-2189
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link.
CVSS Score: 5.1 (MEDIUM)
References: http://www.iss.net/security_center/static/9540.php; http://www.securiteam.com/windowsntfocus/5MP0C0K7PM.html; http://www.iss.net/security_center/static/9540.php
CVE: CVE-2002-2190
Published: 2002-12-31
Description: ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0058.html; http://www.iss.net/security_center/static/10556.php; http://www.securityfocus.com/bid/6127
CVE: CVE-2002-2191
Published: 2002-12-31
Description: Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10557.php; http://www.securityfocus.com/archive/1/298874/2002-11-05/2002-11-11/2; http://www.securityfocus.com/bid/6128
CVE: CVE-2002-2192
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query string in a "dir" request to indexed folders.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0063.html; http://online.securityfocus.com/archive/1/298987; http://www.iss.net/security_center/static/10561.php
CVE: CVE-2002-2193
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web script via the email parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0352.html; http://www.iss.net/security_center/static/10477.php; http://www.securityfocus.com/bid/6040
CVE: CVE-2002-2194
Published: 2002-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1589.  Reason: This candidate is a duplicate of CVE-2002-1589.  Notes: All CVE users should reference CVE-2002-1589 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2002-2195
Published: 2002-12-31
Description: Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/280786; http://www.iss.net/security_center/static/9488.php; http://www.securityfocus.com/bid/5170
CVE: CVE-2002-2196
Published: 2002-12-31
Description: Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc; http://lists.samba.org/archive/samba-technical/2002-June/022075.html; http://rhn.redhat.com/errata/RHBA-2002-209.html
CVE: CVE-2002-2197
Published: 2002-12-31
Description: Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering a NULL pointer dereference.
CVSS Score: 7.2 (HIGH)
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45300&zone_32=45300; http://www.iss.net/security_center/static/9489.php; http://www.securityfocus.com/bid/5171
CVE: CVE-2002-2198
Published: 2002-12-31
Description: Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc; http://www.iss.net/security_center/static/10013.php; http://www.securityfocus.com/bid/5592
CVE: CVE-2002-2199
Published: 2002-12-31
Description: The default aide.conf file in Advanced Intrusion Detection Environment (AIDE) before 0.7_1 on FreeBSD before 2002-08-28 does not properly check subdirectories, which could allow local users to bypass detection.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc; http://www.iss.net/security_center/static/10015.php; http://www.securityfocus.com/bid/5588
CVE: CVE-2002-2200
Published: 2002-12-31
Description: Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/lists/bugtraq/2002/Oct/0397.html; http://www.iss.net/security_center/static/10492.php; http://www.securityfocus.com/bid/6057
CVE: CVE-2002-2201
Published: 2002-12-31
Description: The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc; http://www.iss.net/security_center/static/10052.php; http://www.webmin.com/updates.html
CVE: CVE-2002-2202
Published: 2002-12-31
Description: Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email.
CVSS Score: 3.8 (LOW)
References: http://www.iss.net/security_center/static/10500.php; http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0210&L=ntbugtraq&F=P&S=&P=5732; http://www.iss.net/security_center/static/10500.php
CVE: CVE-2002-2203
Published: 2002-12-31
Description: Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information.
CVSS Score: 4.9 (MEDIUM)
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F45502; http://www.iss.net/security_center/static/9492.php; http://www.securityfocus.com/bid/5161