deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-2204
Published: 2002-12-31
Description: The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicious package comes from a trusted source.
CVSS Score: 7.5 (HIGH)
References: http://lists.netsys.com/pipermail/full-disclosure/2002-August/001167.html; http://www.iss.net/security_center/static/10011.php; http://www.securityfocus.com/bid/5594
CVE: CVE-2002-2205
Published: 2002-12-31
Description: Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname.
CVSS Score: 5.0 (MEDIUM)
References: http://siag.nu/webresolve/news-0.2.0.shtml; http://www.iss.net/security_center/static/9503.php; http://www.securityfocus.com/bid/5175
CVE: CVE-2002-2206
Published: 2002-12-31
Description: The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long username with multiple /localhost entries.
CVSS Score: 7.8 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0240.html; http://www.iss.net/security_center/static/10085.php; http://www.securityfocus.com/archive/1/291358
CVE: CVE-2002-2207
Published: 2002-12-31
Description: Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.
CVSS Score: 10.0 (HIGH)
References: http://www.iss.net/security_center/static/10086.php; http://www.rtfm.com/ssldump/; http://www.securityfocus.com/archive/1/291329
CVE: CVE-2002-2208
Published: 2002-12-31
Description: Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
CVSS Score: 7.8 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]3186&w=2; http://secunia.com/advisories/7766
CVE: CVE-2002-2209
Published: 2002-12-31
Description: Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html; http://www.pablosoftwaresolutions.com/html/baby_ftp_server.html
CVE: CVE-2002-2210
Published: 2002-12-31
Description: The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file.
CVSS Score: 6.2 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0161.html; http://www.iss.net/security_center/static/10346.php; http://www.securityfocus.com/bid/5950
CVE: CVE-2002-2211
Published: 2002-12-31
Description: BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html; http://secunia.com/advisories/20217; http://www.imconf.net/imw-2002/imw2002-papers/198.pdf
CVE: CVE-2002-2212
Published: 2002-12-31
Description: The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
CVSS Score: 5.0 (MEDIUM)
References: http://www.imconf.net/imw-2002/imw2002-papers/198.pdf; http://www.kb.cert.org/vuls/id/457875; http://www.kb.cert.org/vuls/id/IAFY-5FDT5K
CVE: CVE-2002-2213
Published: 2002-12-31
Description: The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
CVSS Score: 5.0 (MEDIUM)
References: http://www.imconf.net/imw-2002/imw2002-papers/198.pdf; http://www.kb.cert.org/vuls/id/457875; http://www.kb.cert.org/vuls/id/IAFY-5FDPYJ
CVE: CVE-2002-2214
Published: 2002-12-31
Description: The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long "To" header.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.php.net/bug.php?id=15595; http://secunia.com/advisories/21202; http://www.redhat.com/support/errata/RHSA-2006-0567.html
CVE: CVE-2002-2215
Published: 2002-12-31
Description: The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of "To" addresses, which triggers an error in the rfc822_write_address function.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.php.net/bug.php?id=19280; https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040; http://bugs.php.net/bug.php?id=19280
CVE: CVE-2002-2216
Published: 2002-12-31
Description: Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtain unspecified sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://www.soft3304.net/04WebServer/Security.html; http://www.soft3304.net/04WebServer/Security.html
CVE: CVE-2002-2217
Published: 2002-12-31
Description: Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) l parameter to customize.php or the (2) pg parameter to index.php.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0303.html; http://securitytracker.com/id?1005712; http://www.frog-man.org/tutos/WSC-WebPortal.txt
CVE: CVE-2002-2218
Published: 2002-12-31
Description: CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value.
CVSS Score: 10.0 (HIGH)
References: http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?r1=1.13&r2=1.14; http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?view=log; http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/site.inc.php?r1=1.13&r2=1.14
CVE: CVE-2002-2219
Published: 2002-12-31
Description: chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user (userid) field.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1005847; http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649; http://www.securiteam.com/unixfocus/6C00N0K6AO.html
CVE: CVE-2002-2220
Published: 2002-12-31
Description: Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local users to gain privileges via unspecified vectors.
CVSS Score: 6.2 (MEDIUM)
References: http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649; http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649
CVE: CVE-2002-2221
Published: 2002-12-31
Description: Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary.  NOTE: this issue might overlap CVE-2006-6639.
CVSS Score: 6.2 (MEDIUM)
References: http://secunia.com/advisories/23024; http://securitytracker.com/id?1005847; http://www.securityfocus.com/bid/21644
CVE: CVE-2002-2222
Published: 2002-12-31
Description: isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (crash) by sending Internet Key Exchange (IKE) payloads out of sequence.
CVSS Score: 5.1 (MEDIUM)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc; http://www.kb.cert.org/vuls/id/287771; http://www.openbsd.org/errata31.html#isakmpd
CVE: CVE-2002-2223
Published: 2002-12-31
Description: Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.
CVSS Score: 5.1 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/287771; http://www.netscreen.com/support/alerts/9_6_02.htm; http://www.securityfocus.com/bid/5668
CVE: CVE-2002-2224
Published: 2002-12-31
Description: Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.
CVSS Score: 5.1 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/287771; http://www.kb.cert.org/vuls/id/AAMN-5A5RXM; http://www.securityfocus.com/bid/5449
CVE: CVE-2002-2225
Published: 2002-12-31
Description: SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflows using (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.
CVSS Score: 5.1 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/287771; http://www.kb.cert.org/vuls/id/AAMN-59VTUQ; http://www.safenet-inc.com/knowledgebase/read_item.asp?ID=375
CVE: CVE-2002-2226
Published: 2002-12-31
Description: Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3160; http://tftpd32.jounin.net/; http://www.kb.cert.org/vuls/id/632633
CVE: CVE-2002-2227
Published: 2002-12-31
Description: Buffer underflow in ssldump 0.9b2 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted SSLv2 challenge value.
CVSS Score: 10.0 (HIGH)
CWE: CWE-787
References: http://www.rtfm.com/ssldump/; http://www.securityfocus.com/archive/1/291329; http://www.securityfocus.com/bid/5693
CVE: CVE-2002-2228
Published: 2002-12-31
Description: MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate character encodings that cannot be processed by MailScanner.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://www.iss.net/security_center/static/10609.php; http://www.securityfocus.com/bid/6148; http://www.iss.net/security_center/static/10609.php
CVE: CVE-2002-2229
Published: 2002-12-31
Description: Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0068.html; http://www.iss.net/security_center/static/10782.php; http://www.securityfocus.com/bid/6327
CVE: CVE-2002-2230
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a ".gif" or ".jpg" string, a variant of CVE-2002-0328.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0069.html; http://www.iss.net/security_center/static/10268.php; http://archives.neohapsis.com/archives/bugtraq/2002-10/0069.html
CVE: CVE-2002-2231
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL in a photo URL or (2) an X-Forwarded-For: header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0073.html; http://www.iss.net/security_center/static/10797.php; http://www.securityfocus.com/bid/6342
CVE: CVE-2002-2232
Published: 2002-12-31
Description: Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command.
CVSS Score: 8.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0074.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0097.html; http://www.iss.net/security_center/static/10802.php
CVE: CVE-2002-2233
Published: 2002-12-31
Description: Directory traversal vulnerability in Enceladus Server Suite 3.9 allows remote attackers to list arbitrary directories and possibly cause a denial of service via "@" (at) characters in a CD (CWD) command, such as (1) "@/....\", (2) "@@@/..c:\", or (3) "@/..@/..".
CVSS Score: 8.3 (HIGH)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0193.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/11019; https://exchange.xforce.ibmcloud.com/vulnerabilities/11020
CVE: CVE-2002-2234
Published: 2002-12-31
Description: NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0093.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0094.html; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-11/0338.html
CVE: CVE-2002-2235
Published: 2002-12-31
Description: member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://online.securityfocus.com/archive/1/301076; http://securityreason.com/securityalert/3229; http://www.iss.net/security_center/static/10701.php
CVE: CVE-2002-2236
Published: 2002-12-31
Description: Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0081.html; http://www.iss.net/security_center/static/10815.php; http://www.securityfocus.com/bid/6340
CVE: CVE-2002-2237
Published: 2002-12-31
Description: tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0084.html; http://www.kb.cert.org/vuls/id/632633; https://exchange.xforce.ibmcloud.com/vulnerabilities/10817
CVE: CVE-2002-2238
Published: 2002-12-31
Description: Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in a GET request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0088.html; http://www.securityfocus.com/bid/6355; https://exchange.xforce.ibmcloud.com/vulnerabilities/10819
CVE: CVE-2002-2239
Published: 2002-12-31
Description: The Cisco Optical Service Module (OSM) for the Catalyst 6500 and 7600 series running Cisco IOS 12.1(8)E through 12.1(13.4)E allows remote attackers to cause a denial of service (hang) via a malformed packet.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://www.cisco.com/warp/public/707/osm-lc-ios-pkt-vuln-pub.shtml; http://www.securityfocus.com/bid/6358; https://exchange.xforce.ibmcloud.com/vulnerabilities/10823
CVE: CVE-2002-2240
Published: 2002-12-31
Description: Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP GET request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0092.html; http://www.securityfocus.com/bid/6359; https://exchange.xforce.ibmcloud.com/vulnerabilities/10827
CVE: CVE-2002-2241
Published: 2002-12-31
Description: Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0101.html; http://www.securityfocus.com/bid/6364; https://exchange.xforce.ibmcloud.com/vulnerabilities/10840
CVE: CVE-2002-2242
Published: 2002-12-31
Description: The Apple Package Manager in KisMAC 0.02a and earlier modifies file permissions of sensitive files after installation, which could allow attackers to conduct unauthorized activities on those files.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://securitytracker.com/id?1005764; http://www.securityfocus.com/bid/6336; https://exchange.xforce.ibmcloud.com/vulnerabilities/10813
CVE: CVE-2002-2243
Published: 2002-12-31
Description: Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service (refused connections) by opening a connection and not closing it.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html; http://synflood.at/akfingerd; http://www.securityfocus.com/bid/6323
CVE: CVE-2002-2244
Published: 2002-12-31
Description: Akfingerd 0.5 and earlier versions allow local users to cause a denial of service (crash) via a .plan with a symlink to /dev/urandom or other device, then disconnecting while data is being transferred, which causes a SIGPIPE error that Akfingerd cannot handle.
CVSS Score: 2.1 (LOW)
CWE: CWE-362
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html; http://synflood.at/akfingerd/; http://www.securityfocus.com/bid/6324
CVE: CVE-2002-2245
Published: 2002-12-31
Description: ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-027.txt.asc; ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2002-027.txt.asc
CVE: CVE-2002-2246
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0113.html; http://www.deerfield.com/products/visnetic_website/; http://www.securityfocus.com/bid/6369
CVE: CVE-2002-2247
Published: 2002-12-31
Description: The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html; http://www.securityfocus.com/bid/6376; https://exchange.xforce.ibmcloud.com/vulnerabilities/10853
CVE: CVE-2002-2248
Published: 2002-12-31
Description: Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1292&w=2; http://www.securityfocus.com/bid/6256; https://exchange.xforce.ibmcloud.com/vulnerabilities/10706
CVE: CVE-2002-2249
Published: 2002-12-31
Description: PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0127&w=2; http://www.securityfocus.com/bid/6260; https://exchange.xforce.ibmcloud.com/vulnerabilities/10709
CVE: CVE-2002-2250
Published: 2002-12-31
Description: Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0080.html; http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0082.html; http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00361.html
CVE: CVE-2002-2251
Published: 2002-12-31
Description: Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to execute arbitrary code via a long argument.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0330.html; http://www.securityfocus.com/bid/6264; https://exchange.xforce.ibmcloud.com/vulnerabilities/10715
CVE: CVE-2002-2252
Published: 2002-12-31
Description: SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html; http://securitytracker.com/id?1005733; https://exchange.xforce.ibmcloud.com/vulnerabilities/10759
CVE: CVE-2002-2253
Published: 2002-12-31
Description: Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0019.html; http://www.securityfocus.com/bid/6294; http://www.securityfocus.com/bid/6299
CVE: CVE-2002-2254
Published: 2002-12-31
Description: The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0025.html; http://www.securityfocus.com/bid/6305; https://exchange.xforce.ibmcloud.com/vulnerabilities/10756