deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-0808
Published: 2002-08-12
Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html; http://bugzilla.mozilla.org/show_bug.cgi?id=107718; http://www.iss.net/security_center/static/9305.php
CVE: CVE-2002-0809
Published: 2002-08-12
Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html; http://bugzilla.mozilla.org/show_bug.cgi?id=148674; http://www.iss.net/security_center/static/10141.php
CVE: CVE-2002-0810
Published: 2002-08-12
Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc; http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html; http://bugzilla.mozilla.org/show_bug.cgi?id=92263
CVE: CVE-2002-0811
Published: 2002-08-12
Description: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0054.html; http://bugzilla.mozilla.org/show_bug.cgi?id=130821; http://www.securityfocus.com/bid/4964
CVE: CVE-2002-0812
Published: 2002-08-12
Description: Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the identification string.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0066.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0075.html; http://www.iss.net/security_center/static/9810.php
CVE: CVE-2002-0813
Published: 2002-08-12
Description: Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9669&w=2; http://online.securityfocus.com/archive/1/284634; http://www.cisco.com/warp/public/707/ios-tftp-long-filename-pub.shtml
CVE: CVE-2002-0814
Published: 2002-08-12
Description: Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0057.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0425&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8716&w=2
CVE: CVE-2002-0815
Published: 2002-08-12
Description: The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4658&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8686&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4658&w=2
CVE: CVE-2002-0816
Published: 2002-08-12
Description: Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/tru64/2002-q3/0019.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7171&w=2; http://www.iss.net/security_center/static/9640.php
CVE: CVE-2002-0817
Published: 2002-08-12
Description: Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0045.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6695&w=2; http://www.debian.org/security/2002/dsa-139
CVE: CVE-2002-0818
Published: 2002-08-12
Description: wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-048.0.txt; http://archives.neohapsis.com/archives/bugtraq/2002-07/0194.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7683&w=2
CVE: CVE-2002-0819
Published: 2002-08-12
Description: Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the arts_fatal function.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0228&w=2; http://marc.info/?l=kde-multimedia&m=[PII_REDACTED]2023&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]0164&w=2
CVE: CVE-2002-0820
Published: 2002-08-12
Description: FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0047.html; http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&frame=right&th=d429cd2ef1d3a2b7&seekm=ai6c0q%242289%241%40FreeBSD.csie.NCTU.edu.tw#link16
CVE: CVE-2002-0821
Published: 2002-08-12
Description: Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via (1) the BGP dissector, or (2) the WCP dissector.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505; http://www.ethereal.com/appnotes/enpa-sa-00005.html; http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000505
CVE: CVE-2002-0822
Published: 2002-08-12
Description: Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) RSVP, (3) AFS, or (4) LMP dissectors, which can be caused to core dump.
CVSS Score: 7.5 (HIGH)
References: http://www.ethereal.com/appnotes/enpa-sa-00005.html; http://www.securityfocus.com/bid/5167; http://www.ethereal.com/appnotes/enpa-sa-00005.html
CVE: CVE-2002-0823
Published: 2002-08-12
Description: Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9440&w=2; http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3Bq293338; http://www.iss.net/security_center/static/9746.php
CVE: CVE-2002-0824
Published: 2002-08-12
Description: BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-010.txt.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5606&w=2; http://www.iss.net/security_center/static/9738.php
CVE: CVE-2002-0825
Published: 2002-08-12
Description: Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://www.padl.com/Articles/PotentialBufferOverflowin.html; http://www.padl.com/Articles/PotentialBufferOverflowin.html
CVE: CVE-2002-0826
Published: 2002-08-12
Description: Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command.
CVSS Score: 7.5 (HIGH)
References: http://www.atstake.com/research/advisories/2002/a080802-1.txt; http://www.ipswitch.com/Support/WS_FTP-Server/patch-upgrades.html; http://www.iss.net/security_center/static/9794.php
CVE: CVE-2002-0827
Published: 2002-08-12
Description: Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.27/CSSA-2002-SCO.27.txt; http://www.iss.net/security_center/static/9380.php; http://www.securityfocus.com/bid/5051
CVE: CVE-2002-0828
Published: 2002-08-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-0862.  Reason: This is a duplicate of CVE-2002-0862.  Notes: All CVE users should reference CVE-2002-0862 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2002-0829
Published: 2002-08-12
Description: Integer overflow in the Berkeley Fast File System (FFS) in FreeBSD 4.6.1 RELEASE-p4 and earlier allows local users to access arbitrary file contents within FFS to gain privileges by creating a file that is larger than allowed by the virtual memory system.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3458&w=2; http://www.iss.net/security_center/static/9771.php; http://www.osvdb.org/5073
CVE: CVE-2002-0830
Published: 2002-08-12
Description: Network File System (NFS) in FreeBSD 4.6.1 RELEASE-p7 and earlier, NetBSD 1.5.3 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service (hang) via an RPC message with a zero length payload, which causes NFS to reference a previous payload and enter an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-013.txt.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4722&w=2; http://www.info.apple.com/usen/security/security_updates.html
CVE: CVE-2002-0831
Published: 2002-08-12
Description: The kqueue mechanism in FreeBSD 4.3 through 4.6 STABLE allows local users to cause a denial of service (kernel panic) via a pipe call in which one end is terminated and an EVFILT_WRITE filter is registered for the other end.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0126&w=2; http://www.iss.net/security_center/static/9774.php; http://www.osvdb.org/5069
CVE: CVE-2002-0832
Published: 2002-08-12
Description: Internet Explorer 5, 5.6, and 6 allows remote attackers to bypass cookie privacy settings and store information across browser sessions via the userData (storeuserData) feature.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6745&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6745&w=2
CVE: CVE-2002-0833
Published: 2002-08-12
Description: Buffer overflow in Eudora 5.1.1 and 5.0-J for Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a multi-part message with a long boundary string.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0304&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4494&w=2; http://www.iss.net/security_center/static/9765.php
CVE: CVE-2002-0844
Published: 2002-08-12
Description: Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-193
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-035.0.txt; ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc; http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0081.html
CVE: CVE-2002-0845
Published: 2002-08-12
Description: Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3192&w=2; http://www.iss.net/security_center/static/9799.php; http://www.securityfocus.com/bid/5433
CVE: CVE-2002-0846
Published: 2002-08-12
Description: The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9280&w=2; http://www.iss.net/security_center/static/9798.php; http://www.macromedia.com/v1/handlers/index.cfm?ID=23293
CVE: CVE-2002-0847
Published: 2002-08-12
Description: tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free).
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/project/shownotes.php?release_id=88790; http://www.iss.net/security_center/static/9079.php; http://www.securityfocus.com/bid/4731
CVE: CVE-2002-0848
Published: 2002-08-12
Description: Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/vpn5k-radius-pap-vuln-pub.shtml; http://www.iss.net/security_center/static/9781.php; http://www.securityfocus.com/bid/5417
CVE: CVE-2002-0849
Published: 2002-08-12
Description: Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5806&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4424&w=2; http://www.iss.net/security_center/static/9792.php
CVE: CVE-2002-1445
Published: 2002-08-12
Description: Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0097.html; http://www.iss.net/security_center/static/9834.php; http://www.securityfocus.com/bid/5447
CVE: CVE-2002-1452
Published: 2002-08-14
Description: Buffer overflow in the search capability for MyWebServer 1.0.2 allows remote attackers to execute arbitrary code via a long searchTarget parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9934&w=2; http://www.iss.net/security_center/static/9859.php
CVE: CVE-2002-1453
Published: 2002-08-14
Description: Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0077.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9934&w=2; http://www.iss.net/security_center/static/9861.php
CVE: CVE-2002-1444
Published: 2002-08-15
Description: The Google toolbar 1.1.60, when running on Internet Explorer 5.5 and 6.0, allows remote attackers to cause a denial of service (crash with an exception in oleaut32.dll) via malicious HTML, possibly related to small width and height parameters or an incorrect call to the Google.Search() function.
CVSS Score: 2.6 (LOW)
References: http://online.securityfocus.com/archive/1/287498; http://www.iss.net/security_center/static/9883.php; http://www.securityfocus.com/bid/5477
CVE: CVE-2002-1451
Published: 2002-08-24
Description: Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) "+" or (2) "\" (backslash) character.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0259.html; http://www.iss.net/security_center/static/9952.php; http://www.securityfocus.com/bid/5566
CVE: CVE-2002-1353
Published: 2002-08-29
Description: LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/7740/; http://securitytracker.com/id?1005830; http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false
CVE: CVE-2002-1606
Published: 2002-08-30
Description: Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.
CVSS Score: 4.6 (MEDIUM)
References: http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11; http://www.kb.cert.org/vuls/id/293305; http://www.kb.cert.org/vuls/id/557481
CVE: CVE-2002-1609
Published: 2002-08-30
Description: Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11; http://www.kb.cert.org/vuls/id/602009; https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE: CVE-2002-1610
Published: 2002-08-30
Description: Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.
CVSS Score: 2.1 (LOW)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/08/msg00430.html; http://www.kb.cert.org/vuls/id/612833; http://www.securityfocus.com/bid/5599
CVE: CVE-2002-1611
Published: 2002-08-30
Description: Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://ftp.support.compaq.com.au/pub/patches/Digital_UNIX/v5.1a/patch_kit/Tru64_UNIX_V5.1A/doc/txt/OSFPAT[PII_REDACTED]0.txt; http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11; http://www.kb.cert.org/vuls/id/115731
CVE: CVE-2002-1607
Published: 2002-08-31
Description: Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11; http://www.kb.cert.org/vuls/id/706817; https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE: CVE-2002-1608
Published: 2002-08-31
Description: Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11; http://www.kb.cert.org/vuls/id/629289; https://exchange.xforce.ibmcloud.com/vulnerabilities/10016
CVE: CVE-2002-1604
Published: 2002-09-02
Description: Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html; http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html; http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11
CVE: CVE-2002-1605
Published: 2002-09-02
Description: Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html; http://archives.neohapsis.com/archives/fulldisclosure/2002-q3/1203.html; http://wwss1pro.compaq.com/support/reference_library/viewdocument.asp?source=SRB0039W.xml&dt=11
CVE: CVE-2002-0093
Published: 2002-09-05
Description: Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/compaq/2002-q3/0010.html; http://www.iss.net/security_center/static/9613.php; http://www.kb.cert.org/vuls/id/771155
CVE: CVE-2002-0632
Published: 2002-09-05
Description: Vulnerability in SGI BDS (Bulk Data Service) BDSPro 2.4 and earlier allows clients to read arbitrary files on a BDS server.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20020804-01-P; http://www.iss.net/security_center/static/9825.php; http://www.osvdb.org/11081
CVE: CVE-2002-0654
Published: 2002-09-05
Description: Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the pathname in the resulting error message, or (2) via an error message that occurs when a script (child process) cannot be invoked.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1052&w=2; http://www.apache.org/dist/httpd/CHANGES_2.0; http://www.iss.net/security_center/static/9875.php
CVE: CVE-2002-0679
Published: 2002-09-05
Description: Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3536&w=2; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F46366&zone_32=category%3Asecurity; http://www-1.ibm.com/support/search.wss?rs=0&q=IY32792&apar=only
CVE: CVE-2002-0720
Published: 2002-09-05
Description: A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code.
CVSS Score: 7.2 (HIGH)
References: http://www.iss.net/security_center/static/9856.php; http://www.securityfocus.com/bid/5480; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-042
CVE: CVE-2002-0721
Published: 2002-09-05
Description: Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/ntbugtraq/2002-q3/0087.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2959&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]6475&w=2