deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-0071
Published: 2002-04-22
Description: Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8265&w=2; http://www.atstake.com/research/advisories/2002/a041002-1.txt; http://www.cert.org/advisories/CA-2002-09.html
CVE: CVE-2002-0072
Published: 2002-04-22
Description: The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5208&w=2; http://www.cert.org/advisories/CA-2002-09.html; http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
CVE: CVE-2002-0073
Published: 2002-04-22
Description: The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0023.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0598&w=2; http://www.cert.org/advisories/CA-2002-09.html
CVE: CVE-2002-0074
Published: 2002-04-22
Description: Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/bugtraq/2002/Apr/0126.html; http://www.cert.org/advisories/CA-2002-09.html; http://www.cgisecurity.com/advisory/9.txt
CVE: CVE-2002-0075
Published: 2002-04-22
Description: Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2990&w=2; http://www.cert.org/advisories/CA-2002-09.html; http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
CVE: CVE-2002-0079
Published: 2002-04-22
Description: Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4518&w=2; http://www.cert.org/advisories/CA-2002-09.html; http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml
CVE: CVE-2002-0147
Published: 2002-04-22
Description: Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."
CVSS Score: 7.5 (HIGH)
References: http://www.cert.org/advisories/CA-2002-09.html; http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml; http://www.iss.net/security_center/static/8796.php
CVE: CVE-2002-0148
Published: 2002-04-22
Description: Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
CVSS Score: 7.5 (HIGH)
References: http://www.cert.org/advisories/CA-2002-09.html; http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml; http://www.iss.net/security_center/static/8803.php
CVE: CVE-2002-0149
Published: 2002-04-22
Description: Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.
CVSS Score: 7.5 (HIGH)
References: http://www.cert.org/advisories/CA-2002-09.html; http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml; http://www.iss.net/security_center/static/8798.php
CVE: CVE-2002-0150
Published: 2002-04-22
Description: Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
CVSS Score: 7.5 (HIGH)
References: http://www.cert.org/advisories/CA-2002-09.html; http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml; http://www.iss.net/security_center/static/8797.php
CVE: CVE-2002-0152
Published: 2002-04-22
Description: Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4015&w=2; http://www.iss.net/security_center/static/8850.php; http://www.osvdb.org/5357
CVE: CVE-2002-0153
Published: 2002-04-22
Description: Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/8851.php; http://www.osvdb.org/5356; http://www.securityfocus.com/archive/1/251805
CVE: CVE-2002-0159
Published: 2002-04-22
Description: Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN  module only (denial of service of administration function) or execute arbitrary code via format strings in the URL to port 2002.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3611&w=2; http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml; http://www.iss.net/security_center/static/8742.php
CVE: CVE-2002-0160
Published: 2002-04-22
Description: The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web root via a ..\.. (modified ..) in the URL to port 2002.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8667&w=2; http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml; http://www.osvdb.org/5352
CVE: CVE-2002-0166
Published: 2002-04-22
Description: Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:02.asc; http://www.debian.org/security/2002/dsa-125; http://www.iss.net/security_center/static/8656.php
CVE: CVE-2002-0167
Published: 2002-04-22
Description: Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470; http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php
CVE: CVE-2002-0168
Published: 2002-04-22
Description: Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-019.0.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000470; http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-029.php
CVE: CVE-2002-0170
Published: 2002-04-22
Description: Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1996&w=2; http://www.iss.net/security_center/static/8334.php; http://www.osvdb.org/5350
CVE: CVE-2002-0175
Published: 2002-04-22
Description: libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html; http://online.securityfocus.com/archive/1/263121; http://www.iss.net/security_center/static/8593.php
CVE: CVE-2002-0176
Published: 2002-04-22
Description: The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html; http://online.securityfocus.com/archive/1/263121; http://www.iss.net/security_center/static/8594.php
CVE: CVE-2002-0177
Published: 2002-04-22
Description: Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6179&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0906&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6035&w=2
CVE: CVE-2002-0179
Published: 2002-04-22
Description: Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2002/dsa-127; http://www.iss.net/security_center/static/8852.php; http://www.securityfocus.com/bid/4534
CVE: CVE-2002-0180
Published: 2002-04-22
Description: Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7673&w=2; http://www.kb.cert.org/vuls/id/582923; http://www.mrunix.net/webalizer/news.html
CVE: CVE-2002-0181
Published: 2002-04-22
Description: Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter.
CVSS Score: 7.5 (HIGH)
References: http://bugs.horde.org/show_bug.cgi?id=916; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000473; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0744&w=2
CVE: CVE-2002-1621
Published: 2002-04-22
Description: Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY26503&apar=only; http://www-1.ibm.com/support/search.wss?rs=0&q=IY28698&apar=only; http://www.kb.cert.org/vuls/id/209363
CVE: CVE-2002-1602
Published: 2002-04-23
Description: Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/524227; http://www.securityfocus.com/archive/1/268998; http://www.securityfocus.com/bid/4578
CVE: CVE-1999-1570
Published: 2002-05-01
Description: Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.
CVSS Score: 7.2 (HIGH)
References: ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.17/CSSA-2002-SCO.17.txt; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]3708&w=2; http://online.securityfocus.com/archive/1/27074
CVE: CVE-2002-1592
Published: 2002-05-06
Description: The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://www.apache.org/dist/httpd/CHANGES_2.0; http://www.iss.net/security_center/static/9623.php; http://www.kb.cert.org/vuls/id/165803
CVE: CVE-2002-0154
Published: 2002-05-16
Description: Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1625&w=2; http://www.cert.org/advisories/CA-2002-22.html; http://www.kb.cert.org/vuls/id/627275
CVE: CVE-2002-0157
Published: 2002-05-16
Description: Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.
CVSS Score: 4.6 (MEDIUM)
References: http://online.securityfocus.com/archive/1/270691/2002-04-29/2002-05-05/0; http://www.iss.net/security_center/static/8995.php; http://www.redhat.com/support/errata/RHSA-2002-064.html
CVE: CVE-2002-0171
Published: 2002-05-16
Description: IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20020406-01-P; http://www.iss.net/security_center/static/8933.php; http://www.kb.cert.org/vuls/id/498707
CVE: CVE-2002-0172
Published: 2002-05-16
Description: /dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic disruption).
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20020408-01-I; http://www.iss.net/security_center/static/8960.php; http://www.kb.cert.org/vuls/id/770891
CVE: CVE-2002-0173
Published: 2002-05-16
Description: Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20020409-01-I; http://www.iss.net/security_center/static/8959.php; http://www.osvdb.org/5359
CVE: CVE-2002-0184
Published: 2002-05-16
Description: Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.
CVSS Score: 7.8 (HIGH)
CWE: CWE-131
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000475; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9912&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9600&w=2
CVE: CVE-2002-0185
Published: 2002-05-16
Description: mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000477; http://www.iss.net/security_center/static/8997.php; http://www.modpython.org/pipermail/mod_python/2002-April/001991.html
CVE: CVE-2002-0196
Published: 2002-05-16
Description: GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root.
CVSS Score: 6.4 (MEDIUM)
References: http://online.securityfocus.com/archive/1/251699; http://sourceforge.net/forum/forum.php?forum_id=144966; http://www.iss.net/security_center/static/7981.php
CVE: CVE-2002-0197
Published: 2002-05-16
Description: psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the "[B]" sequence, which makes the message appear legitimate.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6580&w=2; http://online.securityfocus.com/archive/1/251832; http://www.iss.net/security_center/static/7985.php
CVE: CVE-2002-0198
Published: 2002-05-16
Description: Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2381&w=2; http://pldaniels.org/ripmime/CHANGELOG; http://www.iss.net/security_center/static/7983.php
CVE: CVE-2002-0199
Published: 2002-05-16
Description: Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2724&w=2; http://www.securityfocus.com/bid/3934; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2724&w=2
CVE: CVE-2002-0200
Published: 2002-05-16
Description: Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3289&w=2; http://www.iss.net/security_center/static/7959.php; http://www.securityfocus.com/bid/3929
CVE: CVE-2002-0201
Published: 2002-05-16
Description: Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3289&w=2; http://www.iss.net/security_center/static/7960.php; http://www.securityfocus.com/bid/3930
CVE: CVE-2002-0202
Published: 2002-05-16
Description: PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain the encrypted server password via the world-readable oekakibbs.conf file, or (2) modify the server configuration via the world-writeable /oekaki/ folder.
CVSS Score: 3.6 (LOW)
References: http://online.securityfocus.com/archive/1/251985; http://www.iss.net/security_center/static/7982.php; http://www.securityfocus.com/bid/3948
CVE: CVE-2002-0203
Published: 2002-05-16
Description: ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0376&w=2; http://www.tarantella.com/security/bulletin-03.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0376&w=2
CVE: CVE-2002-0204
Published: 2002-05-16
Description: Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5514&w=2; http://www.iss.net/security_center/static/7991.php; http://www.securityfocus.com/bid/3949
CVE: CVE-2002-0205
Published: 2002-05-16
Description: Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1808&w=2; http://online.securityfocus.com/archive/82/248396; http://www.iss.net/security_center/static/7817.php
CVE: CVE-2002-0206
Published: 2002-05-16
Description: index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4205&w=2; http://www.kb.cert.org/vuls/id/221683; http://www.securityfocus.com/bid/3889
CVE: CVE-2002-0207
Published: 2002-05-16
Description: Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q1/0044.html; http://online.securityfocus.com/archive/1/252414; http://online.securityfocus.com/archive/1/252425
CVE: CVE-2002-0208
Published: 2002-05-16
Description: PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-203
References: http://online.securityfocus.com/archive/1/252407; http://www.iss.net/security_center/static/8008.php; http://www.securityfocus.com/bid/3961
CVE: CVE-2002-0209
Published: 2002-05-16
Description: Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/252455; http://online.securityfocus.com/archive/1/261548; http://www.iss.net/security_center/static/8010.php
CVE: CVE-2002-0210
Published: 2002-05-16
Description: setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file.
CVSS Score: 7.2 (HIGH)
References: http://online.securityfocus.com/archive/1/252614; http://www.iss.net/security_center/static/8003.php; http://www.securityfocus.com/bid/3970
CVE: CVE-2002-0211
Published: 2002-05-16
Description: Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.
CVSS Score: 6.2 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2179&w=2; http://online.securityfocus.com/archive/1/265845; http://www.iss.net/security_center/static/7996.php
CVE: CVE-2002-0212
Published: 2002-05-16
Description: The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.
CVSS Score: 7.5 (HIGH)
References: http://hostingcontroller.com/English/patches/ForAll/index.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5897&w=2; http://www.iss.net/security_center/static/8006.php
CVE: CVE-2002-0213
Published: 2002-05-16
Description: xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20020604-01-I; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8717&w=2; http://www.iss.net/security_center/static/8002.php