deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-1984
Published: 2002-12-31
Description: Microsoft Internet Explorer 5.0.1 through 6.0 on Windows 2000 or Windows XP allows remote attackers to cause a denial of service (crash) via an OBJECT tag that contains a crafted CLASSID (CLSID) value of "CLSID:[PII_REDACTED]-C[PII_REDACTED]00046".
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/bugtraq/2002/Jun/0303.html; http://www.securityfocus.com/bid/5094; http://seclists.org/bugtraq/2002/Jun/0303.html
CVE: CVE-2002-1985
Published: 2002-12-31
Description: iSMTP 5.0.1 allows remote attackers to cause a denial of service via a long "MAIL FROM" command, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/299232; http://www.iss.net/security_center/static/10577.php; http://www.nii.co.in/vuln/ismtp.html
CVE: CVE-2002-1986
Published: 2002-12-31
Description: Perception LiteServe 2.0 through 2.0.1 allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0074.html; http://www.iss.net/security_center/static/10635.php; http://www.securityfocus.com/bid/6188
CVE: CVE-2002-1987
Published: 2002-12-31
Description: Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a "\.." (backslash dot dot).
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/277225; http://www.iss.net/security_center/static/9351.php; http://www.securityfocus.com/bid/5031
CVE: CVE-2002-1988
Published: 2002-12-31
Description: Resin 2.1.1 allows remote attackers to cause a denial of service (memory consumption and hang) via a URL with long variables for non-existent resources.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/277232; http://www.iss.net/security_center/static/9352.php; http://www.securityfocus.com/bid/5032
CVE: CVE-2002-1989
Published: 2002-12-31
Description: Resin 2.1.1 allows remote attackers to cause a denial of service (thread and connection consumption) via multiple URL requests containing the DOS 'CON' device name and a registered file extension such as .jsp or .xtp.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0108.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0108.html
CVE: CVE-2002-1990
Published: 2002-12-31
Description: Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/278747; http://www.iss.net/security_center/static/9419.php; http://www.securityfocus.com/bid/5095
CVE: CVE-2002-1991
Published: 2002-12-31
Description: PHP file inclusion vulnerability in osCommerce 2.1 execute arbitrary commands via the include_file parameter to include_once.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://online.securityfocus.com/archive/1/277312; http://www.iss.net/security_center/static/9369.php; http://www.oscommerce.com/about.php/news%2C72
CVE: CVE-2002-1992
Published: 2002-12-31
Description: Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/9460.php; http://www.macromedia.com/v1/handlers/index.cfm?ID=23161; http://www.securityfocus.com/bid/5121
CVE: CVE-2002-1993
Published: 2002-12-31
Description: webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter.
CVSS Score: 10.0 (HIGH)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/06/msg00232.html; http://www.iss.net/security_center/static/9378.php; http://www.securityfocus.com/bid/5048
CVE: CVE-2002-1994
Published: 2002-12-31
Description: advserver.exe in Advanced Web Server (AdvServer) Professional 1.030000 allows remote attackers to cause a denial of service via multiple HTTP requests containing a single carriage return/line feed (CRLF) sequence.
CVSS Score: 5.0 (MEDIUM)
References: http://elaboration.8bit.co.uk/projects/texts/advisories/AdvServer.DoS.txt; http://online.securityfocus.com/archive/1/278181; http://www.iss.net/security_center/static/9410.php
CVE: CVE-2002-1995
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in phptonuke.php for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the filnavn parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0048.html; http://www.iss.net/security_center/static/7837.php; http://www.securityfocus.com/bid/3807
CVE: CVE-2002-1996
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter in index.php.
CVSS Score: 2.6 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0288.html; http://archives.neohapsis.com/archives/bugtraq/2002-03/0299.html; http://sourceforge.net/tracker/index.php?func=detail&aid=524777&group_id=27927&atid=392228
CVE: CVE-2002-1997
Published: 2002-12-31
Description: ZoneAlarm Pro 3.0 MailSafe allows remote attackers to bypass filtering and possibly execute arbitrary code via email attachments containing a trailing dot after the file extension.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/265387; http://www.securityfocus.com/bid/4407; https://exchange.xforce.ibmcloud.com/vulnerabilities/8744
CVE: CVE-2002-1998
Published: 2002-12-31
Description: Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).
CVSS Score: 7.5 (HIGH)
References: ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.12/CSSA-2002-SCO.12.txt; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0127.html; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-01/0129.html
CVE: CVE-2002-1999
Published: 2002-12-31
Description: HP Praesidium Webproxy 1.0 running on HP-UX 11.04 VVOS could allow remote attackers to cause Webproxy to forward requests to the internal network via crafted HTTP requests.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/hp/2002-q1/0092.html; http://www.ciac.org/ciac/bulletins/m-061.shtml; http://www.iss.net/security_center/static/8606.php
CVE: CVE-2002-2000
Published: 2002-12-31
Description: ACMS 4.3 and 4.4 in OpenVMS Alpha 7.2 and 7.3 does not properly use process privileges, which allows attackers to access data.
CVSS Score: 2.1 (LOW)
References: http://ftp.support.compaq.com/patches/.new/html/SSRT0813.shtml; http://www.iss.net/security_center/static/8306.php; http://www.securityfocus.com/bid/4184
CVE: CVE-2002-2001
Published: 2002-12-31
Description: jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 1.2 (LOW)
References: http://www.iss.net/security_center/static/7980.php; http://www.mandriva.com/security/advisories?name=MDKSA-2002:008; http://www.securityfocus.com/bid/3940
CVE: CVE-2002-2002
Published: 2002-12-31
Description: Buffer overflow in libc in Compaq Tru64 4.0F, 5.0, 5.1 and 5.1A allows attackers to execute arbitrary code via long (1) LANG and (2) LOCPATH environment variables.
CVSS Score: 7.5 (HIGH)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00219.html; http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml; http://www.iss.net/security_center/static/8863.php
CVE: CVE-2002-2003
Published: 2002-12-31
Description: ypbind in Compaq Tru64 4.0F, 4.0G, 5.0A, 5.1 and 5.1A allows remote attackers to cause the process to core dump via certain network packets generated by nmap.
CVSS Score: 5.0 (MEDIUM)
References: http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml; http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
CVE: CVE-2002-2004
Published: 2002-12-31
Description: portmapper in Compaq Tru64 4.0G and 5.0A allows remote attackers to cause a denial of service via a flood of packets.
CVSS Score: 5.0 (MEDIUM)
References: http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml; http://ftp.support.compaq.com/patches/.new/html/SSRT-541.shtml
CVE: CVE-2002-2005
Published: 2002-12-31
Description: Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/hp/2002-q1/0084.html; http://cert.uni-stuttgart.de/archive/bugtraq/2002/03/msg00279.html; http://www.iss.net/security_center/static/8483.php
CVE: CVE-2002-2006
Published: 2002-12-31
Description: The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0311.html; http://secunia.com/advisories/30899; http://secunia.com/advisories/30908
CVE: CVE-2002-2007
Published: 2002-12-31
Description: The default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00272.html; http://cert.uni-stuttgart.de/archive/bugtraq/2002/05/msg00275.html; http://www.iss.net/security_center/static/9208.php
CVE: CVE-2002-2008
Published: 2002-12-31
Description: Apache Tomcat 4.0.3 for Windows allows remote attackers to obtain the web root path via an HTTP request for a resource that does not exist, such as lpt9, which leaks the information in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0225.html; http://tomcat.apache.org/security-4.html; http://www.iss.net/security_center/static/9394.php
CVE: CVE-2002-2009
Published: 2002-12-31
Description: Apache Tomcat 4.0.1 allows remote attackers to obtain the web root path via HTTP requests for JSP files preceded by (1) +/, (2) >/, (3) </, and (4) %20/, which leaks the pathname in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://tomcat.apache.org/security-4.html; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0286.html; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0297.html
CVE: CVE-2002-2010
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in htsearch.cgi in htdig (ht://Dig) 3.1.5, 3.1.6, and 3.2 allows remote attackers to inject arbitrary web script or HTML via the words parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0321.html; http://www.iss.net/security_center/static/9433.php; http://www.securityfocus.com/bid/5091
CVE: CVE-2002-2011
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in the fom CGI program (fom.cgi) in Faq-O-Matic 2.711 and 2.712 allows remote attackers to inject arbitrary web script or HTML via the file parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0287.html; http://www.iss.net/security_center/static/8906.php; http://www.securityfocus.com/bid/4565
CVE: CVE-2002-2012
Published: 2002-12-31
Description: Unknown vulnerability in Apache 1.3.19 running on HP Secure OS for Linux 1.0 allows remote attackers to cause "unexpected results" via an HTTP request.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/7810.php; http://www.securityfocus.com/advisories/3761; http://www.securityfocus.com/bid/3796
CVE: CVE-2002-2013
Published: 2002-12-31
Description: Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
CVSS Score: 5.0 (MEDIUM)
References: http://alive.znep.com/~marcs/security/mozillacookie/demo.html; http://archives.neohapsis.com/archives/bugtraq/2002-01/0270.html; http://www.iss.net/security_center/static/7973.php
CVE: CVE-2002-2014
Published: 2002-12-31
Description: Lotus Domino 5.0.8 web server returns different error messages when a valid or invalid user is provided in HTTP requests, which allows remote attackers to determine valid user names and makes it easier to conduct brute force attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0373.html; http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0258.html; http://www.iss.net/security_center/static/8038.php
CVE: CVE-2002-2015
Published: 2002-12-31
Description: PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-03/0345.html; http://www.iss.net/security_center/static/8699.php; http://www.securityfocus.com/bid/4381
CVE: CVE-2002-2016
Published: 2002-12-31
Description: User-mode Linux (UML) 2.4.17-8 does not restrict access to kernel address space, which allows local users to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0338.html; http://www.iss.net/security_center/static/8005.php; http://www.securityfocus.com/bid/3973
CVE: CVE-2002-2017
Published: 2002-12-31
Description: sastcpd in SAS/Base 8.0 allows local users to execute arbitrary code by setting the authprog environment variable to reference a malicious program, which is then executed by sastcpd.
CVSS Score: 10.0 (HIGH)
References: http://online.securityfocus.com/archive/1/253183; http://www.iss.net/security_center/static/8024.php; http://www.securityfocus.com/bid/3994
CVE: CVE-2002-2018
Published: 2002-12-31
Description: sastcpd in SAS/Base 8.0 might allow local users to gain privileges by setting the netencralg environment variable, which causes a segmentation fault.
CVSS Score: 7.2 (HIGH)
References: http://online.securityfocus.com/archive/1/253183; http://securitytracker.com/id?1003406; http://www.sas.com/service/techsup/unotes/SN/004/004201.html
CVE: CVE-2002-2019
Published: 2002-12-31
Description: PHP remote file inclusion vulnerability in include_once.php in osCommerce (a.k.a. Exchange Project) 2.1 allows remote attackers to execute arbitrary PHP code via the include_file parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0188.html; http://www.iss.net/security_center/static/9369.php; http://www.oscommerce.com/about.php/news%2C72
CVE: CVE-2002-2020
Published: 2002-12-31
Description: Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26 uses a default administrator password and accepts admin logins on the external interface, which allows remote attackers to gain privileges if the password is not changed.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0177.html; http://www.iss.net/security_center/static/9371.php; http://www.securityfocus.com/bid/5036
CVE: CVE-2002-2021
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in WoltLab Burning Board (wbboard) 1.1.1 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0163.html; http://www.iss.net/security_center/static/8841.php; http://www.securityfocus.com/bid/4512
CVE: CVE-2002-2022
Published: 2002-12-31
Description: Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java.lang.NoClassDefFoundError is thrown, via format specifiers in the forName attribute.
CVSS Score: 7.2 (HIGH)
References: http://cert.uni-stuttgart.de/archive/vuln-dev/2002/03/msg00050.html; http://www.iss.net/security_center/static/8399.php; http://www.securityfocus.com/bid/4249
CVE: CVE-2002-2023
Published: 2002-12-31
Description: The get_parameter_from_freqency_source function in beep2 1.0, 1.1 and 1.2, when installed setuid root, allows local users to read arbitrary files via unknown attack vectors.
CVSS Score: 2.1 (LOW)
References: http://www.kip.iis.toyama-u.ac.jp/~shingo/beep/package/src/beep2-1.2a.tar.gz; http://www.securityfocus.com/bid/3859; http://www.kip.iis.toyama-u.ac.jp/~shingo/beep/package/src/beep2-1.2a.tar.gz
CVE: CVE-2002-2024
Published: 2002-12-31
Description: Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) ldap.search.php3?ldap_serv=nonsense which leaks the information in error messages.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-219
References: http://bugs.horde.org/show_bug.cgi?id=916; http://www.iss.net/security_center/static/8768.php; http://www.securityfocus.com/bid/4445
CVE: CVE-2002-2025
Published: 2002-12-31
Description: Lotus Domino server 5.0.9a and earlier allows remote attackers to cause a denial of service by exhausting the number of working threads via a large number of HTTP requests for (1) an MS-DOS device name and (2) an MS-DOS device name with a large number of characters appended to the device name.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0037.html; http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e[PII_REDACTED]062619d/945e97608fda942a85256b37007905b1?OpenDocument&Highlight=0%2CJCHN547JWV; http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e[PII_REDACTED]062619d/a77f8a5132cce70085256b[PII_REDACTED]?OpenDocument&Highlight=0%2CJCHN4UMKLA
CVE: CVE-2002-2026
Published: 2002-12-31
Description: Buffer overflow in BrowseFTP 1.62 client allows remote FTP servers to execute arbitrary code via a long FTP "220" message reply.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1003130; http://www.iss.net/security_center/static/7793.php; http://www.securityfocus.com/bid/3781
CVE: CVE-2002-2027
Published: 2002-12-31
Description: Database of Our Owlish Wisdom (DOOW) 0.1 through 0.2.1 does not properly verify user permissions, which allows remote attackers to perform unauthorized activities.
CVSS Score: 7.5 (HIGH)
References: http://prdownloads.sourceforge.net/doow/doow_v0.2.2.zip?use_mirror=unc; http://www.securityfocus.com/bid/3932; http://prdownloads.sourceforge.net/doow/doow_v0.2.2.zip?use_mirror=unc
CVE: CVE-2002-2028
Published: 2002-12-31
Description: The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which makes it easier for users with physical access to conduct brute force password guessing.
CVSS Score: 2.1 (LOW)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/01/msg00278.html; http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq188700; http://www.heysoft.de/nt/lbh.htm
CVE: CVE-2002-2029
Published: 2002-12-31
Description: PHP, when installed on Windows with Apache and ScriptAlias for /php/ set to c:/php/, allows remote attackers to read arbitrary files and possibly execute arbitrary programs via an HTTP request for php.exe with a filename in the query string.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/7815.php; http://www.securiteam.com/windowsntfocus/5ZP030U60U.html; http://www.securityfocus.com/bid/3786
CVE: CVE-2002-2030
Published: 2002-12-31
Description: Stack-based buffer overflow in SQLData Enterprise Server 3.0 allows remote attacker to execute arbitrary code and cause a denial of service via a long HTTP request.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1003123; http://www.iss.net/security_center/static/7821.php; http://www.securityfocus.com/bid/3778
CVE: CVE-2002-2031
Published: 2002-12-31
Description: Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0019.html; http://www.iss.net/security_center/static/7784.php; http://www.securityfocus.com/bid/3779
CVE: CVE-2002-2032
Published: 2002-12-31
Description: sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers to gain SQL query information by setting the sql_debug parameter to (1) index.php and (2) modules.php.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfaq.com/unixfocus/5OP041P6BE.html; http://www.securityfocus.com/bid/3906; http://www.securityfaq.com/unixfocus/5OP041P6BE.html
CVE: CVE-2002-2033
Published: 2002-12-31
Description: faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-01/0065.html; http://www.iss.net/security_center/static/7833.php; http://www.securityfocus.com/bid/3810
CVE: CVE-2002-2034
Published: 2002-12-31
Description: The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments.
CVSS Score: 7.5 (HIGH)
References: http://www.impsec.org/email-tools/sanitizer-changelog.html; http://www.iss.net/security_center/static/7847.php; http://www.securityfocus.com/bid/3820
CVE: CVE-2002-2035
Published: 2002-12-31
Description: SQL injection vulnerability in RealityScape MyLogin 2000 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password in the login form.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/9016.php; http://www.securiteam.com/windowsntfocus/5CP041P75S.html; http://www.iss.net/security_center/static/9016.php
CVE: CVE-2002-2036
Published: 2002-12-31
Description: Sun Ray Server Software (SRSS) 1.3, when Non-Smartcard Mobility (NSCM) is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client.
CVSS Score: 7.5 (HIGH)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-44069-1; http://www.iss.net/security_center/static/9252.php; http://www.securityfocus.com/bid/4911
CVE: CVE-2002-2037
Published: 2002-12-31
Description: The Cisco Media Gateway Controller (MGC) in (1) SC2200 7.4 and earlier, (2) VSC3000 9.1 and earlier, (3) PGW 2200 9.1 and earlier, (4) Billing and Management Server (BAMS) and (5) Voice Services Provisioning Tool (VSPT) runs on default installations of Solaris 2.6 with unnecessary services and without the latest security patches, which allows attackers to exploit known vulnerabilities.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/Solaris-for-MGC-pub.shtml; http://www.iss.net/security_center/static/7912.php; http://www.securityfocus.com/bid/3897
CVE: CVE-2002-2038
Published: 2002-12-31
Description: Next Generation POSIX Threading (NGPT) 1.9.0 uses a filesystem-based shared memory entry, which allows local users to cause a denial of service or in threaded processes or spoof files via unknown methods.
CVSS Score: 3.6 (LOW)
References: http://www.iss.net/security_center/static/9255.php; http://www.securityfocus.com/bid/4913; http://www.iss.net/security_center/static/9255.php