deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-1548
Published: 2003-03-31
Description: Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called."
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/aix/2002-q4/0002.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/19159; http://archives.neohapsis.com/archives/aix/2002-q4/0002.html
CVE: CVE-2002-1549
Published: 2003-03-31
Description: Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0138.html; http://www.iss.net/security_center/static/10607.php; http://www.securityfocus.com/bid/6162
CVE: CVE-2002-1550
Published: 2003-03-31
Description: dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/aix/2002-q4/0002.html; http://www.securityfocus.com/bid/8802; http://archives.neohapsis.com/archives/aix/2002-q4/0002.html
CVE: CVE-2002-1551
Published: 2003-03-31
Description: Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/aix/2002-q4/0002.html; http://archives.neohapsis.com/archives/aix/2002-q4/0002.html
CVE: CVE-2002-1552
Published: 2003-03-31
Description: Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5027&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8781&w=2; http://www.securityfocus.com/bid/6163
CVE: CVE-2002-1553
Published: 2003-03-31
Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.
CVSS Score: 7.5 (HIGH)
References: http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml; http://www.iss.net/security_center/static/10505.php; http://www.securityfocus.com/bid/6076
CVE: CVE-2002-1554
Published: 2003-03-31
Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.
CVSS Score: 4.6 (MEDIUM)
References: http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml; http://www.iss.net/security_center/static/10506.php; http://www.securityfocus.com/bid/6078
CVE: CVE-2002-1555
Published: 2003-03-31
Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml; http://www.iss.net/security_center/static/10507.php; http://www.securityfocus.com/bid/6081
CVE: CVE-2002-1556
Published: 2003-03-31
Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR).
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml; http://www.iss.net/security_center/static/10508.php; http://www.securityfocus.com/bid/6084
CVE: CVE-2002-1557
Published: 2003-03-31
Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml; http://www.iss.net/security_center/static/10509.php; http://www.securityfocus.com/bid/6082
CVE: CVE-2002-1558
Published: 2003-03-31
Description: Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.
CVSS Score: 10.0 (HIGH)
References: http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml; http://www.iss.net/security_center/static/10510.php; http://www.securityfocus.com/bid/6083
CVE: CVE-2002-1559
Published: 2003-03-31
Description: Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0447.html; http://archives.neohapsis.com/archives/bugtraq/2002-10/0448.html; http://www.iss.net/security_center/static/10518.php
CVE: CVE-2002-1560
Published: 2003-03-31
Description: index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0328.html; http://www.iss.net/security_center/static/10455.php; http://www.securityfocus.com/bid/6033
CVE: CVE-2003-0080
Published: 2003-03-31
Description: The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass intended access restrictions if packet forwarding is enabled.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/4400; http://www.redhat.com/support/errata/RHSA-2003-072.html; http://www.securityfocus.com/bid/7128
CVE: CVE-2003-0085
Published: 2003-03-31
Description: Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in Samba before 2.2.8, and Samba-TNG before 0.3.1, allows remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20030302-01-I; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6629&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7768&w=2
CVE: CVE-2003-0086
Published: 2003-03-31
Description: The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
CVSS Score: 1.2 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20030302-01-I; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6629&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9374&w=2
CVE: CVE-2003-0109
Published: 2003-03-31
Description: Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7372&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0254&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9064&w=2
CVE: CVE-2003-0127
Published: 2003-03-31
Description: The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-020.0.txt; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0134.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6555&w=2
CVE: CVE-2003-0144
Published: 2003-03-31
Description: Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as (1) request ID or (2) user name.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.2/common/010_lprm.patch; ftp://patches.sgi.com/support/free/security/advisories/20030406-02-P; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4429&w=2
CVE: CVE-2003-0145
Published: 2003-03-31
Description: Unknown vulnerability in tcpdump before 3.7.2 related to an inability to "Handle unknown RADIUS attributes properly," allows remote attackers to cause a denial of service (infinite loop), a different vulnerability than CAN-2003-0093.
CVSS Score: 5.0 (MEDIUM)
References: http://www.debian.org/security/2003/dsa-261; http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027; http://www.redhat.com/support/errata/RHSA-2003-032.html
CVE: CVE-2003-0146
Published: 2003-03-31
Description: Multiple vulnerabilities in NetPBM 9.20 and earlier, and possibly other versions, may allow remote attackers to cause a denial of service or execute arbitrary code via "maths overflow errors" such as (1) integer signedness errors or (2) integer overflows, which lead to buffer overflows.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000656; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6522&w=2; http://www.debian.org/security/2003/dsa-263
CVE: CVE-2003-0147
Published: 2003-03-31
Description: OpenSSL does not use RSA blinding by default, which allows local and remote attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal).
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-014.0.txt; ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0130.html
CVE: CVE-2002-0030
Published: 2003-04-02
Description: The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html; http://www.kb.cert.org/vuls/id/549913
CVE: CVE-2002-1485
Published: 2003-04-02
Description: The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service (crash) via certain strings such as "P > O < C".
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0282.html; http://www.securityfocus.com/bid/5783; http://archives.neohapsis.com/archives/bugtraq/2002-09/0282.html
CVE: CVE-2002-1486
Published: 2003-04-02
Description: Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0258.html; http://archives.neohapsis.com/archives/bugtraq/2002-09/0266.html; http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html
CVE: CVE-2002-1487
Published: 2003-04-02
Description: The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html; http://www.iss.net/security_center/static/10161.php; http://www.securityfocus.com/bid/5775
CVE: CVE-2002-1488
Published: 2003-04-02
Description: The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) via a PART message with (1) a missing channel or (2) a channel that the Trillian user is not in.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0268.html; http://www.iss.net/security_center/static/10162.php; http://www.securityfocus.com/bid/5776
CVE: CVE-2002-1489
Published: 2003-04-02
Description: Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0166.html; http://archives.neohapsis.com/archives/bugtraq/2002-10/0236.html; http://www.iss.net/security_center/static/10124.php
CVE: CVE-2002-1490
Published: 2003-04-02
Description: NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-007.txt.asc; http://www.iss.net/security_center/static/10115.php; http://www.osvdb.org/7566
CVE: CVE-2002-1491
Published: 2003-04-02
Description: The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml; http://www.iss.net/security_center/static/10129.php; http://www.osvdb.org/7041
CVE: CVE-2002-1492
Published: 2003-04-02
Description: Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel.
CVSS Score: 7.2 (HIGH)
References: http://www.cisco.com/warp/public/707/vpn5k-client-multiple-vuln-pub.shtml; http://www.iss.net/security_center/static/10131.php; http://www.securityfocus.com/bid/5734
CVE: CVE-2002-1493
Published: 2003-04-02
Description: Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0198.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0132.html; http://www.securityfocus.com/bid/5728
CVE: CVE-2002-1494
Published: 2003-04-02
Description: Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0026.html; http://www.iss.net/security_center/static/10029.php; http://www.securityfocus.com/bid/5618
CVE: CVE-2002-1495
Published: 2003-04-02
Description: Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via (1) attached file names in the Read Mail feature, (2) text/html mails that are displayed in a pop-up window, and (3) certain malicious attributes within otherwise safe tags, such as onMouseOver.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0270.html; http://www.iss.net/security_center/static/10152.php; http://www.securityfocus.com/bid/5771
CVE: CVE-2002-1496
Published: 2003-04-02
Description: Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0284.html; http://freshmeat.net/releases/97910/; http://www.iss.net/security_center/static/10160.php
CVE: CVE-2002-1497
Published: 2003-04-02
Description: Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
CVSS Score: 4.3 (MEDIUM)
References: http://freshmeat.net/releases/97910/; http://www.securityfocus.com/bid/5603; https://exchange.xforce.ibmcloud.com/vulnerabilities/10004
CVE: CVE-2002-1498
Published: 2003-04-02
Description: Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL containing .. sequences with "/" or "\" characters.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0307.html; http://www.iss.net/security_center/static/9981.php; http://www.securityfocus.com/bid/5590
CVE: CVE-2002-1499
Published: 2003-04-02
Description: Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0097.html; http://online.securityfocus.com/archive/1/290021; http://sourceforge.net/tracker/index.php?func=detail&aid=602711&group_id=12668&atid=112668
CVE: CVE-2002-1500
Published: 2003-04-02
Description: Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET().
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-014.txt.asc; http://www.iss.net/security_center/static/10114.php; http://www.securityfocus.com/bid/5727
CVE: CVE-2002-1501
Published: 2003-04-02
Description: The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to cause a denial of service (crash) via multiple port scans to ports 15077 and 15078.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0141.html; http://www.enterasys.com/support/techtips/tk0659-9.html; http://www.iss.net/security_center/static/10096.php
CVE: CVE-2002-1502
Published: 2003-04-02
Description: Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0131.html; http://www.iss.net/security_center/static/10078.php; http://www.securityfocus.com/bid/5700
CVE: CVE-2002-1503
Published: 2003-04-02
Description: Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd, (2) afdcmd, (3) afd_ctrl, (4) init_afd, (5) mafd, (6) mon_ctrl, (7) show_olog, or (8) udc.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0029.html; http://www.dwd.de/AFD/txt/CHANGES; http://www.iss.net/security_center/static/10036.php
CVE: CVE-2002-1504
Published: 2003-04-02
Description: Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a URL.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0045.html; http://www.iss.net/security_center/static/10051.php; http://archives.neohapsis.com/archives/bugtraq/2002-09/0045.html
CVE: CVE-2002-1505
Published: 2003-04-02
Description: SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0083.html; http://www.iss.net/security_center/static/10069.php; http://www.securityfocus.com/bid/5675
CVE: CVE-2002-1506
Published: 2003-04-02
Description: Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0304.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0093.html; http://www.iss.net/security_center/static/9980.php
CVE: CVE-2002-1507
Published: 2003-04-02
Description: Unreal Tournament 2003 (ut2003) clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0116.html; http://www.iss.net/security_center/static/10128.php; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0116.html
CVE: CVE-2002-1512
Published: 2003-04-02
Description: xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file.
CVSS Score: 6.2 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0154.html; http://www.iss.net/security_center/static/10101.php; http://www.securityfocus.com/bid/5708
CVE: CVE-2002-1513
Published: 2003-04-02
Description: The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0010.html; http://archives.neohapsis.com/archives/compaq/2002-q4/0000.html; http://online.securityfocus.com/archive/1/293070
CVE: CVE-2002-1514
Published: 2003-04-02
Description: gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0311.html; http://www.iss.net/security_center/static/10196.php; http://www.securityfocus.com/bid/5805
CVE: CVE-2002-1515
Published: 2003-04-02
Description: Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0001.html; http://online.securityfocus.com/archive/1/295358; http://www.coolforum.net/index.php?p=dlcoolforum
CVE: CVE-2002-1516
Published: 2003-04-02
Description: rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.
CVSS Score: 4.6 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P; http://www.ciac.org/ciac/bulletins/n-004.shtml; http://www.iss.net/security_center/static/10272.php
CVE: CVE-2002-1517
Published: 2003-04-02
Description: fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.
CVSS Score: 4.6 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20020903-01-P; ftp://patches.sgi.com/support/free/security/advisories/20020903-02-P; ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P