deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-0297
Published: 2002-05-31
Description: Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7615&w=2; http://www.securityfocus.com/bid/4128; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7615&w=2
CVE: CVE-2002-0298
Published: 2002-05-31
Description: ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0931&w=2; http://www.securityfocus.com/bid/4145; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0931&w=2
CVE: CVE-2002-0299
Published: 2002-05-31
Description: CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.
CVSS Score: 7.6 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1749&w=2; http://www.iss.net/security_center/static/8035.php; http://www.securityfocus.com/bid/3975
CVE: CVE-2002-0300
Published: 2002-05-31
Description: gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5292&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3898&w=2; http://www.debian.org/security/2002/dsa-114
CVE: CVE-2002-0301
Published: 2002-05-31
Description: Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1895&w=2; http://www.securityfocus.com/bid/4142; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1895&w=2
CVE: CVE-2002-0302
Published: 2002-05-31
Description: The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from being sent in the event of an attack.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4604&w=2; http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20a.html; http://www.securityfocus.com/bid/4139
CVE: CVE-2002-0303
Published: 2002-05-31
Description: GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0983&w=2; http://www.securityfocus.com/bid/4154; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0983&w=2
CVE: CVE-2002-0304
Published: 2002-05-31
Description: Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0591&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0433&w=2; http://www.securityfocus.com/bid/4153
CVE: CVE-2002-0305
Published: 2002-05-31
Description: Zero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3293&w=2; http://www.securityfocus.com/bid/4155; https://exchange.xforce.ibmcloud.com/vulnerabilities/8270
CVE: CVE-2002-0306
Published: 2002-05-31
Description: ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6112&w=2; http://www.securityfocus.com/bid/4149; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6112&w=2
CVE: CVE-2002-0307
Published: 2002-05-31
Description: Directory traversal vulnerability in ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to determine the existence of arbitrary files or execute any Perl program on the system via a .. (dot dot) in the p parameter, which reads the target file and attempts to execute the line using Perl's eval function.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6112&w=2; http://www.securityfocus.com/bid/4147; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6112&w=2
CVE: CVE-2002-0308
Published: 2002-05-31
Description: admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6675&w=2; http://www.securityfocus.com/bid/4152; https://exchange.xforce.ibmcloud.com/vulnerabilities/8245
CVE: CVE-2002-0309
Published: 2002-05-31
Description: SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7060&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3853&w=2; http://securityresponse.symantec.com/avcenter/security/Content/2002.02.20.html
CVE: CVE-2002-0310
Published: 2002-05-31
Description: Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9631&w=2; http://www.securityfocus.com/bid/4156; https://exchange.xforce.ibmcloud.com/vulnerabilities/8255
CVE: CVE-2002-0311
Published: 2002-05-31
Description: Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) in scoadminreg.cgi or (2) service_action.cgi.
CVSS Score: 10.0 (HIGH)
References: ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.6/CSSA-2002-SCO.6.txt; http://online.securityfocus.com/archive/1/251747; http://www.iss.net/security_center/static/7977.php
CVE: CVE-2002-0042
Published: 2002-06-18
Description: Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.
CVSS Score: 2.1 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20020402-01-P; http://www.iss.net/security_center/static/8839.php; http://www.securityfocus.com/bid/4511
CVE: CVE-2002-0357
Published: 2002-06-18
Description: Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20020601-01-P; http://www.ciac.org/ciac/bulletins/m-087.shtml; http://www.iss.net/security_center/static/9261.php
CVE: CVE-2002-0368
Published: 2002-06-18
Description: The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-400
References: http://www.iss.net/security_center/static/9195.php; http://www.securityfocus.com/bid/4881; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-025
CVE: CVE-2002-0380
Published: 2002-06-18
Description: Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-025.0.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000491; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4226&w=2
CVE: CVE-2002-0388
Published: 2002-06-18
Description: Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.
CVSS Score: 7.5 (HIGH)
References: http://mail.python.org/pipermail/mailman-announce/2002-May/000042.html; http://www.securityfocus.com/bid/4826; http://mail.python.org/pipermail/mailman-announce/2002-May/000042.html
CVE: CVE-2002-0389
Published: 2002-06-18
Description: Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4968&w=2; http://rhn.redhat.com/errata/RHSA-2015-1417.html; http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id=103
CVE: CVE-2002-0400
Published: 2002-06-18
Description: ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.24.1/CSSA-2002-SCO.24.1.txt; http://archives.neohapsis.com/archives/hp/2002-q3/0022.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000494
CVE: CVE-2002-0401
Published: 2002-06-18
Description: SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt; http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6119&w=2
CVE: CVE-2002-0402
Published: 2002-06-18
Description: Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code while Ethereal is parsing keysyms.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt; http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6119&w=2
CVE: CVE-2002-0403
Published: 2002-06-18
Description: DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt; http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6119&w=2
CVE: CVE-2002-0404
Published: 2002-06-18
Description: Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption).
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-037.0.txt; http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6119&w=2
CVE: CVE-2002-0575
Published: 2002-06-18
Description: Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-022.2.txt; http://archives.neohapsis.com/archives/bugtraq/2002-04/0298.html; http://archives.neohapsis.com/archives/bugtraq/2002-04/0394.html
CVE: CVE-2002-0576
Published: 2002-06-18
Description: ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0028.html; http://online.securityfocus.com/archive/1/268263; http://www.iss.net/security_center/static/8866.php
CVE: CVE-2002-0577
Published: 2002-06-18
Description: Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of service.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/hp/2002-q2/0023.html; http://securityreason.com/securityalert/656; http://www.iss.net/security_center/static/8939.php
CVE: CVE-2002-0578
Published: 2002-06-18
Description: Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with Basic Authentication containing a long (1) user name or (2) password.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0013.html; http://www.securityfocus.com/bid/4665; http://archives.neohapsis.com/archives/bugtraq/2002-05/0013.html
CVE: CVE-2002-0579
Published: 2002-06-18
Description: WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html; http://www.iss.net/security_center/static/8900.php; http://www.securityfocus.com/bid/4552
CVE: CVE-2002-0580
Published: 2002-06-18
Description: WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html; http://www.iss.net/security_center/static/8902.php; http://www.securityfocus.com/bid/4553
CVE: CVE-2002-0581
Published: 2002-06-18
Description: WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html; http://www.iss.net/security_center/static/8903.php; http://www.securityfocus.com/bid/4555
CVE: CVE-2002-0582
Published: 2002-06-18
Description: WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html; http://www.iss.net/security_center/static/8905.php; http://www.securityfocus.com/bid/4554
CVE: CVE-2002-0583
Published: 2002-06-18
Description: WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html; http://www.iss.net/security_center/static/8905.php; http://www.securityfocus.com/bid/4554
CVE: CVE-2002-0584
Published: 2002-06-18
Description: WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html; http://www.iss.net/security_center/static/8907.php; http://www.securityfocus.com/bid/4556
CVE: CVE-2002-0585
Published: 2002-06-18
Description: Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/hp/2002-q2/0034.html; http://www.iss.net/security_center/static/9020.php; http://www.securityfocus.com/bid/4680
CVE: CVE-2002-0586
Published: 2002-06-18
Description: Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html; http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152; http://www.iss.net/security_center/static/8860.php
CVE: CVE-2002-0587
Published: 2002-06-18
Description: Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html; http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/aolserver/aolserver/nspd/log.c.diff?r1=1.4&r2=1.4.6.1; http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152
CVE: CVE-2002-0588
Published: 2002-06-18
Description: PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/268231; http://orbit-net.net:8001/php/pvote/; http://www.iss.net/security_center/static/8877.php
CVE: CVE-2002-0589
Published: 2002-06-18
Description: PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/268231; http://orbit-net.net:8001/php/pvote/; http://www.iss.net/security_center/static/8878.php
CVE: CVE-2002-0590
Published: 2002-06-18
Description: Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and steal cookies as other IcrediBB users via the (1) title or (2) body of posts.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0263.html; http://www.iss.net/security_center/static/8879.php; http://www.securityfocus.com/bid/4548
CVE: CVE-2002-0591
Published: 2002-06-18
Description: Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0203.html; http://www.iss.net/security_center/static/8870.php; http://www.securityfocus.com/bid/4526
CVE: CVE-2002-0592
Published: 2002-06-18
Description: AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/269006; http://www.securityfocus.com/bid/4574; https://exchange.xforce.ibmcloud.com/vulnerabilities/8931
CVE: CVE-2002-0593
Published: 2002-06-18
Description: Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490; http://online.securityfocus.com/archive/1/270249; http://secunia.com/advisories/8039
CVE: CVE-2002-0594
Published: 2002-06-18
Description: Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490; http://online.securityfocus.com/archive/1/270249; http://www.iss.net/security_center/static/8977.php
CVE: CVE-2002-0595
Published: 2002-06-18
Description: Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.html; http://www.iss.net/security_center/static/8864.php; http://www.securityfocus.com/bid/4531
CVE: CVE-2002-0596
Published: 2002-06-18
Description: WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.html; http://www.iss.net/security_center/static/8865.php; http://www.ngssoftware.com/advisories/wtr.txt
CVE: CVE-2002-0597
Published: 2002-06-18
Description: LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0025.html; http://online.securityfocus.com/archive/1/268066; http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ320751
CVE: CVE-2002-0598
Published: 2002-06-18
Description: Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/268581; http://www.foundstone.com/knowledge/fscan112_advisory.html; http://www.iss.net/security_center/static/8895.php
CVE: CVE-2002-0599
Published: 2002-06-18
Description: Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php instead of going through the login screen.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0395.html; http://sourceforge.net/project/shownotes.php?release_id=87004; http://www.iss.net/security_center/static/8951.php
CVE: CVE-2002-0600
Published: 2002-06-18
Description: Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0339.html; http://www.iss.net/security_center/static/8938.php; http://www.securityfocus.com/bid/4592
CVE: CVE-2002-0601
Published: 2002-06-18
Description: ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malformed DHCP packets that cause RealSecure to dereference a null pointer.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0420.html; http://www.iss.net/security_center/alerts/advise116.php; http://www.iss.net/security_center/static/8961.php