deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-1874
Published: 2002-12-31
Description: astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request.  NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://astrocam.svn.sourceforge.net/viewvc/astrocam/BUGS?view=markup; http://securitytracker.com/id?1005523; http://www.iss.net/security_center/static/10538.php
CVE: CVE-2002-1875
Published: 2002-12-31
Description: Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the entercept_agent account and conceal their identity.
CVSS Score: 4.6 (MEDIUM)
References: http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-07/0010.html; http://www.iss.net/security_center/static/9546.php; http://www.securityfocus.com/bid/5206
CVE: CVE-2002-1876
Published: 2002-12-31
Description: Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.
CVSS Score: 2.1 (LOW)
CWE: CWE-400
References: http://online.securityfocus.com/archive/1/286220; http://www.iss.net/security_center/static/9791.php; http://www.securityfocus.com/bid/5413
CVE: CVE-2002-1877
Published: 2002-12-31
Description: NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://online.securityfocus.com/archive/1/290849; http://www.iss.net/security_center/static/10061.php; http://www.securityfocus.com/bid/5667
CVE: CVE-2002-1878
Published: 2002-12-31
Description: PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html; http://www.ifrance.com/kitetoua/tuto/W-Agora.txt; http://www.iss.net/security_center/static/9317.php
CVE: CVE-2002-1879
Published: 2002-12-31
Description: SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to member.php or (2) loser parameter to misc.php.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html; http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt; http://www.iss.net/security_center/static/9318.php
CVE: CVE-2002-1880
Published: 2002-12-31
Description: LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html; http://www.ifrance.com/kitetoua/tuto/LokwaBB.txt; http://archives.neohapsis.com/archives/bugtraq/2002-06/0055.html
CVE: CVE-2002-1881
Published: 2002-12-31
Description: Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0088.html; http://www.iss.net/security_center/static/9843.php; http://www.securityfocus.com/bid/5445
CVE: CVE-2002-1882
Published: 2002-12-31
Description: Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/10285.php; http://www.oracle.com/technology/deploy/security/pdf/2002alert44rev1.pdf; http://www.securityfocus.com/bid/5901
CVE: CVE-2002-1883
Published: 2002-12-31
Description: Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote attackers to open arbitrary HTML pages and cause a denial of service.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.trolltech.com/qt-interest/2002-09/thread00549-0.html; http://online.securityfocus.com/archive/1/293556; http://www.iss.net/security_center/static/10227.php
CVE: CVE-2002-1884
Published: 2002-12-31
Description: index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "admin".
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html; http://www.iss.net/security_center/static/10308.php; http://www.securityfocus.com/bid/5849
CVE: CVE-2002-1885
Published: 2002-12-31
Description: PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the rel_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html; http://www.iss.net/security_center/static/10309.php; http://www.securityfocus.com/bid/5860
CVE: CVE-2002-1886
Published: 2002-12-31
Description: TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0016.html; http://www.iss.net/security_center/static/10310.php; http://www.securityfocus.com/bid/5850
CVE: CVE-2002-1887
Published: 2002-12-31
Description: PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0060.html; http://secunia.com/advisories/7220; http://www.iss.net/security_center/static/10288.php
CVE: CVE-2002-1888
Published: 2002-12-31
Description: CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0043.html; http://www.iss.net/security_center/static/10293.php; http://www.securityfocus.com/bid/5878
CVE: CVE-2002-1889
Published: 2002-12-31
Description: Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a denial of service (crash) via a malformed log entry.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.cert.dfn.de/pub/tools/audit/logsurfer/logsurfer.README.asc; http://online.securityfocus.com/archive/1/294131; http://www.iss.net/security_center/static/10287.php
CVE: CVE-2002-1890
Published: 2002-12-31
Description: rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file.
CVSS Score: 2.1 (LOW)
References: http://online.securityfocus.com/archive/1/276317; http://www.iss.net/security_center/static/9335.php; http://www.securityfocus.com/bid/4984
CVE: CVE-2002-1891
Published: 2002-12-31
Description: Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/276537; http://www.iss.net/security_center/static/9340.php; http://www.securityfocus.com/bid/4998
CVE: CVE-2002-1892
Published: 2002-12-31
Description: NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0133.html; http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00004.html; http://www.iss.net/security_center/static/10216.php
CVE: CVE-2002-1893
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0085.html; http://www.iss.net/security_center/static/10301.php; http://www.securityfocus.com/bid/5906
CVE: CVE-2002-1894
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://online.securityfocus.com/archive/1/300362; http://www.iss.net/security_center/static/10653.php; http://www.phpbb.com/phpBB/viewtopic.php?t=56283
CVE: CVE-2002-1895
Published: 2002-12-31
Description: The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0020.html; http://tomcat.apache.org/security-4.html; http://www.iss.net/security_center/static/10348.php
CVE: CVE-2002-1896
Published: 2002-12-31
Description: Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument.
CVSS Score: 7.2 (HIGH)
References: http://alsaplayer.org/changelog.php3; http://cvs.sourceforge.net/viewcvs.py/alsaplayer/alsaplayer/app/Main.cpp.diff?r1=1.66&r2=1.67; http://lists.grok.org.uk/pipermail/full-disclosure/2002-September/001730.html
CVE: CVE-2002-1897
Published: 2002-12-31
Description: MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/lists/bugtraq/2002/Oct/0177.html; http://www.iss.net/security_center/static/10349.php; http://www.mywebserver.org/us/downloads/whats_new_in_this_version.shtml
CVE: CVE-2002-1898
Published: 2002-12-31
Description: Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://apple.slashdot.org/apple/02/09/21/122236.shtml?tid=172; http://lists.apple.com/archives/security-announce/2002/Sep/msg00001.html; http://www.iss.net/security_center/static/10156.php
CVE: CVE-2002-1899
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML via the "Full Name" (addressname) parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0135.html; http://archives.neohapsis.com/archives/bugtraq/2002-11/0172.html; http://www.icewarp.com/Products/IceWarp_Web_Mail/releasenotes.txt
CVE: CVE-2002-1900
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject arbitrary web script or HTML via tasklists.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/4988; http://www.securityfocus.com/bid/4988
CVE: CVE-2002-1901
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/4992; http://www.securityfocus.com/bid/4992
CVE: CVE-2002-1902
Published: 2002-12-31
Description: CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdated parent.
CVSS Score: 5.0 (MEDIUM)
References: http://freshmeat.net/releases/86842/; http://www.iss.net/security_center/static/10055.php; http://www.securityfocus.com/bid/4960
CVE: CVE-2002-1903
Published: 2002-12-31
Description: Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/276029; http://www.iss.net/security_center/static/9297.php; http://www.securityfocus.com/bid/4963
CVE: CVE-2002-1904
Published: 2002-12-31
Description: Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS Score: 7.5 (HIGH)
References: http://lynorics.sundawn.net/prog/ghttpd.html#versionen; http://online.securityfocus.com/archive/1/295141; http://www.iss.net/security_center/static/10361.php
CVE: CVE-2002-1905
Published: 2002-12-31
Description: Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/295146; http://www.iss.net/security_center/static/10359.php; http://www.polycom.com/common/pw_item_show_doc/0%2C1449%2C1442%2C00.pdf
CVE: CVE-2002-1906
Published: 2002-12-31
Description: The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete HTTP requests and leaving the connections open.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/295146; http://www.iss.net/security_center/static/10360.php; http://www.polycom.com/common/pw_item_show_doc/0%2C1449%2C1442%2C00.pdf
CVE: CVE-2002-1907
Published: 2002-12-31
Description: TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/295149; http://www.iss.net/security_center/static/10367.php; http://www.securityfocus.com/bid/5961
CVE: CVE-2002-1908
Published: 2002-12-31
Description: Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that contains a large number of "/" (forward slash) characters.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10370.php; http://www.securiteam.com/windowsntfocus/6C00C1F5QA.html; http://www.securityfocus.com/bid/5907
CVE: CVE-2002-1909
Published: 2002-12-31
Description: Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/295309; http://www.iss.net/security_center/static/10387.php; http://www.securityfocus.com/bid/5969
CVE: CVE-2002-1910
Published: 2002-12-31
Description: Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords.
CVSS Score: 7.5 (HIGH)
CWE: CWE-326
References: http://online.securityfocus.com/archive/1/295309; http://www.iss.net/security_center/static/10389.php; http://www.securityfocus.com/bid/5970
CVE: CVE-2002-1911
Published: 2002-12-31
Description: ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood).  NOTE: the vendor was not able to reproduce the issue.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0238.html; http://www.iss.net/security_center/static/10379.php; http://www.securityfocus.com/archive/1/295434
CVE: CVE-2002-1912
Published: 2002-12-31
Description: SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service (null pointer exception and kernel panic) via a large number of packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://www.globalintersec.com/adv/skystream[PII_REDACTED].txt; http://www.iss.net/security_center/static/10380.php; http://www.securityfocus.com/archive/1/295516
CVE: CVE-2002-1913
Published: 2002-12-31
Description: phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0225.html; http://www.iss.net/security_center/static/10396.php; http://www.securityfocus.com/bid/5982
CVE: CVE-2002-1914
Published: 2002-12-31
Description: dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: http://online.securityfocus.com/archive/1/283033; http://secunia.com/advisories/21520; http://support.avaya.com/elmodocs2/security/ASA-2006-156.htm
CVE: CVE-2002-1915
Published: 2002-12-31
Description: tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: http://online.securityfocus.com/archive/1/283033; http://www.iss.net/security_center/static/9633.php; http://www.securityfocus.com/bid/5265
CVE: CVE-2002-1916
Published: 2002-12-31
Description: Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service (crash) via a nickname containing an MS-DOS device name such as AUX, which is inserted into a filename for saving queries.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10395.php; http://www.securiteam.com/windowsntfocus/6F00A205QQ.html; http://www.iss.net/security_center/static/10395.php
CVE: CVE-2002-1917
Published: 2002-12-31
Description: CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/283140; http://www.iss.net/security_center/static/9639.php; http://www.securityfocus.com/bid/5271
CVE: CVE-2002-1918
Published: 2002-12-31
Description: Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors.  NOTE: due to the lack of details available regarding this issue, perhaps it should be REJECTED.
CVSS Score: 10.0 (HIGH)
References: http://www.nextgenss.com/vna/ms-ado.txt; http://www.securityfocus.com/bid/4849; https://exchange.xforce.ibmcloud.com/vulnerabilities/10186
CVE: CVE-2002-1919
Published: 2002-12-31
Description: SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password fields.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0233.html; http://archives.neohapsis.com/archives/bugtraq/2002-06/0061.html; http://www.securityfocus.com/bid/4861
CVE: CVE-2002-1920
Published: 2002-12-31
Description: Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD command with a long directory name.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/274279; http://www.iss.net/security_center/static/9189.php; http://www.securityfocus.com/bid/4862
CVE: CVE-2002-1921
Published: 2002-12-31
Description: The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/288105; http://www.iss.net/security_center/static/9908.php; http://www.securityfocus.com/bid/5511
CVE: CVE-2002-1922
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0272.html; http://www.iss.net/security_center/static/10407.php; http://www.securityfocus.com/bid/5997
CVE: CVE-2002-1923
Published: 2002-12-31
Description: The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activities without detection.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/288105; http://www.iss.net/security_center/static/9909.php; http://www.securityfocus.com/bid/5513
CVE: CVE-2002-1924
Published: 2002-12-31
Description: PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/277930; http://www.iss.net/security_center/static/9413.php; http://www.security.nnov.ru/news2064.html
CVE: CVE-2002-1925
Published: 2002-12-31
Description: Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Personal Firewall Agent module.
CVSS Score: 5.0 (MEDIUM)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00298.html; http://www.iss.net/security_center/static/9918.php; http://www.securityfocus.com/bid/5525
CVE: CVE-2002-1926
Published: 2002-12-31
Description: Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0212.html; http://www.iss.net/security_center/static/9929.php; http://www.securityfocus.com/bid/5533
CVE: CVE-2002-1927
Published: 2002-12-31
Description: Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0212.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/9930; http://archives.neohapsis.com/archives/bugtraq/2002-08/0212.html
CVE: CVE-2002-1928
Published: 2002-12-31
Description: 602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0265.html; http://www.iss.net/security_center/static/10450.php; http://archives.neohapsis.com/archives/bugtraq/2002-10/0265.html
CVE: CVE-2002-1929
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (2) email, or (3) download actions.
CVSS Score: 4.3 (MEDIUM)
References: http://online.securityfocus.com/archive/1/296387; http://www.iss.net/security_center/static/10416.php; http://www.securiteam.com/unixfocus/6J00Q0A5PK.html
CVE: CVE-2002-1930
Published: 2002-12-31
Description: Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0032.html; http://www.iss.net/security_center/static/10410.php; http://www.securityfocus.com/bid/6012