deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-1037
Published: 2002-10-04
Description: Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html; http://dcl.sourceforge.net/index.php; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2589&w=2
CVE: CVE-2002-1038
Published: 2002-10-04
Description: Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2) Work Orders: Import features.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html; http://dcl.sourceforge.net/index.php; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2589&w=2
CVE: CVE-2002-1039
Published: 2002-10-04
Description: Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot dot) sequences when downloading files from the Projects: Attachments feature.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0022.html; http://dcl.sourceforge.net/index.php; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2589&w=2
CVE: CVE-2002-1040
Published: 2002-10-04
Description: Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/aix/2002-q3/0000.html; http://archives.neohapsis.com/archives/aix/2002-q3/0000.html
CVE: CVE-2002-1041
Published: 2002-10-04
Description: Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/aix/2002-q3/0000.html; http://archives.neohapsis.com/archives/aix/2002-q3/0000.html
CVE: CVE-2002-1042
Published: 2002-10-04
Description: Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0085.html; http://www.iss.net/security_center/static/9517.php; http://www.securityfocus.com/bid/5191
CVE: CVE-2002-1043
Published: 2002-10-04
Description: Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject ("\t\t").
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html; http://www.iss.net/security_center/static/9547.php; http://www.securityfocus.com/bid/5212
CVE: CVE-2002-1044
Published: 2002-10-04
Description: Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Subject field.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html; http://www.iss.net/security_center/static/9547.php; http://www.securityfocus.com/bid/5212
CVE: CVE-2002-1045
Published: 2002-10-04
Description: Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Date field that is converted into a year greater than 2037.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0117.html; http://www.iss.net/security_center/static/9547.php; http://www.securityfocus.com/bid/5212
CVE: CVE-2002-1046
Published: 2002-10-04
Description: Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to TCP port 4110.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0012.html; http://www.iss.net/security_center/static/9509.php; http://www.securityfocus.com/bid/5186
CVE: CVE-2002-1047
Published: 2002-10-04
Description: The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0139.html; http://www.iss.net/security_center/static/9511.php; http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0139.html
CVE: CVE-2002-1048
Published: 2002-10-04
Description: HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0345.html; http://www.iss.net/security_center/static/9693.php; http://www.kb.cert.org/vuls/id/377003
CVE: CVE-2002-1049
Published: 2002-10-04
Description: Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html; http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=300; http://www.debian.org/security/2002/dsa-148
CVE: CVE-2002-1050
Published: 2002-10-04
Description: Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0358.html; http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=312; http://www.debian.org/security/2002/dsa-148
CVE: CVE-2002-1051
Published: 2002-10-04
Description: Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0040.html; http://archives.neohapsis.com/archives/bugtraq/2002-07/0254.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7749&w=2
CVE: CVE-2002-1052
Published: 2002-10-04
Description: Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0028.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0031.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4392&w=2
CVE: CVE-2002-1053
Published: 2002-10-04
Description: Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0190.html; http://www.iss.net/security_center/static/9914.php; http://www.osvdb.org/4015
CVE: CVE-2002-1054
Published: 2002-10-04
Description: Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\" (dot-dot backslash) sequences in a LIST command.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0035.html; http://online.securityfocus.com/archive/1/283665; http://www.iss.net/security_center/static/9647.php
CVE: CVE-2002-1055
Published: 2002-10-04
Description: Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0353.html; http://www.iss.net/security_center/static/9701.php; http://www.securityfocus.com/bid/5339
CVE: CVE-2002-1057
Published: 2002-10-04
Description: Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0245.html; http://www.iss.net/security_center/static/9651.php; http://www.securityfocus.com/bid/5285
CVE: CVE-2002-1058
Published: 2002-10-04
Description: Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html; http://www.iss.net/security_center/static/9669.php; http://www.securityfocus.com/bid/5297
CVE: CVE-2002-1059
Published: 2002-10-04
Description: Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8462&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8689&w=2; http://www.iss.net/security_center/static/9650.php
CVE: CVE-2002-1060
Published: 2002-10-04
Description: Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0283.html; http://download.cacheflow.com/release/CA/4.1.00-docs/CACacheOS41fixes.htm; http://www.iss.net/security_center/static/9674.php
CVE: CVE-2002-1061
Published: 2002-10-04
Description: Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the HTTP proxy on port 3128 with a long major version number, (3) a long OK reply from a POP3 server, and (4) a long SMTP server response.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html; http://www.iss.net/security_center/static/9682.php; http://www.iss.net/security_center/static/9683.php
CVE: CVE-2002-1062
Published: 2002-10-04
Description: Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html; http://www.iss.net/security_center/static/9684.php; http://www.securityfocus.com/bid/5321
CVE: CVE-2002-1063
Published: 2002-10-04
Description: Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html; http://www.iss.net/security_center/static/9687.php; http://www.securityfocus.com/bid/5325
CVE: CVE-2002-1064
Published: 2002-10-04
Description: Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html; http://www.iss.net/security_center/static/9688.php; http://www.securityfocus.com/bid/5326
CVE: CVE-2002-1065
Published: 2002-10-04
Description: Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html; http://www.iss.net/security_center/static/9688.php; http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html
CVE: CVE-2002-1066
Published: 2002-10-04
Description: Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html; http://www.iss.net/security_center/static/9689.php; http://www.securityfocus.com/bid/5327
CVE: CVE-2002-1067
Published: 2002-10-04
Description: Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service (reboot and reset) via a long password, possibly due to a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0336.html; http://www.iss.net/security_center/static/9702.php; http://www.securityfocus.com/bid/5329
CVE: CVE-2002-1068
Published: 2002-10-04
Description: The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0341.html; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]7680&w=2; http://www.iss.net/security_center/static/9703.php
CVE: CVE-2002-1069
Published: 2002-10-04
Description: The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm, (2) Device Status, or (3) Device Information.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1542&w=2; http://online.securityfocus.com/archive/1/288584; http://www.iss.net/security_center/static/9967.php
CVE: CVE-2002-1070
Published: 2002-10-04
Description: Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0190.html; http://www.iss.net/security_center/static/9627.php; http://www.securityfocus.com/bid/5254
CVE: CVE-2002-1071
Published: 2002-10-04
Description: ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet with both the SYN and ACK flags set.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/277242; http://online.securityfocus.com/archive/1/277303; http://online.securityfocus.com/archive/1/277307
CVE: CVE-2002-1072
Published: 2002-10-04
Description: ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via an oversized, fragmented "jolt" style ICMP packet.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0036.html; http://online.securityfocus.com/archive/1/283999; http://www.iss.net/security_center/static/9655.php
CVE: CVE-2002-1073
Published: 2002-10-04
Description: Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0195.html; http://www.iss.net/security_center/static/9618.php; http://www.securityfocus.com/bid/5261
CVE: CVE-2002-1075
Published: 2002-10-04
Description: Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0277.html; http://www.iss.net/security_center/static/9673.php; http://www.securityfocus.com/bid/5302
CVE: CVE-2002-1076
Published: 2002-10-04
Description: Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0326.html; http://archives.neohapsis.com/archives/bugtraq/2002-07/0363.html; http://archives.neohapsis.com/archives/bugtraq/2002-07/0368.html
CVE: CVE-2002-1077
Published: 2002-10-04
Description: IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0399.html; http://www.iss.net/security_center/static/9722.php; http://www.securityfocus.com/bid/5365
CVE: CVE-2002-1078
Published: 2002-10-04
Description: Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0043.html; http://online.securityfocus.com/archive/1/284904; http://www.iss.net/security_center/static/9721.php
CVE: CVE-2002-1079
Published: 2002-10-04
Description: Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html; http://www.aprelium.com/news/patch1033.html; http://www.iss.net/security_center/static/9940.php
CVE: CVE-2002-1080
Published: 2002-10-04
Description: The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.chl, (2) consport.chl, (3) general.chl, (4) srvparam.chl, and (5) advanced.chl.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html; http://www.aprelium.com/news/patch1033.html; http://www.iss.net/security_center/static/9957.php
CVE: CVE-2002-1081
Published: 2002-10-04
Description: The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html; http://www.aprelium.com/news/patch1033.html; http://www.iss.net/security_center/static/9956.php
CVE: CVE-2002-1082
Published: 2002-10-04
Description: The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html; http://online.securityfocus.com/archive/1/284229; http://www.iss.net/security_center/static/9698.php
CVE: CVE-2002-1083
Published: 2002-10-04
Description: Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories using the Maintain Images file listing, via .. (dot dot) sequences.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html; http://online.securityfocus.com/archive/1/284229; http://www.iss.net/security_center/static/9710.php
CVE: CVE-2002-1084
Published: 2002-10-04
Description: The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html; http://online.securityfocus.com/archive/1/284229; http://www.iss.net/security_center/static/9711.php
CVE: CVE-2002-1085
Published: 2002-10-04
Description: Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html; http://online.securityfocus.com/archive/1/284229; http://www.iss.net/security_center/static/9712.php
CVE: CVE-2002-1086
Published: 2002-10-04
Description: Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html; http://online.securityfocus.com/archive/1/284229; http://www.iss.net/security_center/static/9713.php
CVE: CVE-2002-1087
Published: 2002-10-04
Description: The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html; http://online.securityfocus.com/archive/1/284229; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0040.html
CVE: CVE-2002-1088
Published: 2002-10-04
Description: Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0296.html; http://support.novell.com/servlet/tidfinder/2963273; http://www.iss.net/security_center/static/9671.php
CVE: CVE-2002-1089
Published: 2002-10-04
Description: rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0203.html; http://www.iss.net/security_center/static/9628.php; http://www.securityfocus.com/bid/5262
CVE: CVE-2002-1090
Published: 2002-10-04
Description: Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denial of service via long server responses.
CVSS Score: 7.5 (HIGH)
References: http://www.stafford.uklinux.net/libesmtp/ChangeLog.txt; http://www.stafford.uklinux.net/libesmtp/ChangeLog.txt
CVE: CVE-2002-1091
Published: 2002-10-04
Description: Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
CVSS Score: 7.5 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=157989; http://crash.ihug.co.nz/~Sneuro/zerogif/; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0770&w=2
CVE: CVE-2002-1092
Published: 2002-10-04
Description: Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.
CVSS Score: 7.5 (HIGH)
References: http://www.cisco.com/warp/public/707/vpn3k-multiple-vuln-pub.shtml; http://www.securityfocus.com/bid/5613; https://exchange.xforce.ibmcloud.com/vulnerabilities/10017