deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-1711
Published: 2002-12-31
Description: BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0117.html; http://online.securityfocus.com/archive/1/277710; http://www.securityfocus.com/bid/5065
CVE: CVE-2002-1712
Published: 2002-12-31
Description: Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/252616; http://support.microsoft.com/default.aspx?scid=kb%3BEN-US%3Bq280446; http://www.securityfocus.com/bid/3967
CVE: CVE-2002-1713
Published: 2002-12-31
Description: The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: http://online.securityfocus.com/archive/1/277515; http://www.kb.cert.org/vuls/id/455323; http://www.securityfocus.com/bid/5050
CVE: CVE-2002-1714
Published: 2002-12-31
Description: Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/268776; http://www.securityfocus.com/bid/4564; https://exchange.xforce.ibmcloud.com/vulnerabilities/8904
CVE: CVE-2002-1715
Published: 2002-12-31
Description: SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.
CVSS Score: 7.2 (HIGH)
References: http://online.securityfocus.com/archive/1/268446; http://www.securityfocus.com/bid/4547; https://exchange.xforce.ibmcloud.com/vulnerabilities/8908
CVE: CVE-2002-1716
Published: 2002-12-31
Description: The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/265087; http://www.guninski.com/m%24oxp-2.html; http://www.securityfocus.com/bid/4398
CVE: CVE-2002-1717
Published: 2002-12-31
Description: Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://online.securityfocus.com/archive/1/255555; http://online.securityfocus.com/archive/1/256125; http://www.securityfocus.com/bid/4078
CVE: CVE-2002-1718
Published: 2002-12-31
Description: Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://online.securityfocus.com/archive/1/255555; http://online.securityfocus.com/archive/1/256125; http://www.securityfocus.com/bid/4084
CVE: CVE-2002-1719
Published: 2002-12-31
Description: Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1003503; http://www.securityfocus.com/bid/4079; https://exchange.xforce.ibmcloud.com/vulnerabilities/40988
CVE: CVE-2002-1720
Published: 2002-12-31
Description: SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field.
CVSS Score: 7.5 (HIGH)
References: http://www.securiteam.com/windowsntfocus/5VP030K75G.html; http://www.securityfocus.com/bid/4661; https://exchange.xforce.ibmcloud.com/vulnerabilities/8991
CVE: CVE-2002-1721
Published: 2002-12-31
Description: Off-by-one error in alterMIME 0.1.10 and 0.1.11 allows remote attackers to cause a denial of service (crash) via an x-header that causes snprintf overwrite the FFGET_FILE variable with a (null) byte.
CVSS Score: 7.5 (HIGH)
CWE: CWE-193
References: http://www.pldaniels.com/altermime/CHANGELOG; http://www.securityfocus.com/bid/4650; https://exchange.xforce.ibmcloud.com/vulnerabilities/8992
CVE: CVE-2002-1722
Published: 2002-12-31
Description: Logitech iTouch keyboards allows attackers with physical access to the system to bypass the screen locking function and execute user-defined commands that have been assigned to a button.
CVSS Score: 4.6 (MEDIUM)
References: http://online.securityfocus.com/archive/1/270702; http://www.securityfocus.com/bid/4662; https://exchange.xforce.ibmcloud.com/vulnerabilities/8994
CVE: CVE-2002-1723
Published: 2002-12-31
Description: Powerboards 2.2b allows remote attackers to view the full path to the backend database by sending a cookie containing a non-existent username to profiles.php, which displays the full path in the error message.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/82/266665; http://www.ifrance.com/kitetoua/tuto/powerboards.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/8824
CVE: CVE-2002-1724
Published: 2002-12-31
Description: Cross-site scripting vulnerability (XSS) in phpimageview.php for PHPImageView 1.0 allows remote attackers to execute arbitrary script as other users via the pic parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://online.securityfocus.com/archive/82/270970; http://www.ifrance.com/kitetoua/tuto/5holes4.txt; http://www.securityfocus.com/bid/4668
CVE: CVE-2002-1725
Published: 2002-12-31
Description: phpimageview.php in PHPImageView 1.0 allows remote attackers to obtain sensitive information via the pw=show option, which invokes the phpinfo function.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/82/270970/2002-12-21/2002-12-27/2; http://www.ifrance.com/kitetoua/tuto/5holes4.txt; http://www.securityfocus.com/bid/4668
CVE: CVE-2002-1726
Published: 2002-12-31
Description: secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword parameter, and an accesslevel parameter that is lower than the access level of the requested page.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/82/270970; http://www.ifrance.com/kitetoua/tuto/5holes4.txt; http://www.securityfocus.com/bid/4669
CVE: CVE-2002-1727
Published: 2002-12-31
Description: Cross-site scripting vulnerability (XSS) in (1) as_web.exe and (2) as_web4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL.
CVSS Score: 6.8 (MEDIUM)
References: http://online.securityfocus.com/archive/82/270970; http://www.ifrance.com/kitetoua/tuto/5holes4.txt; http://www.securityfocus.com/bid/4670
CVE: CVE-2002-1728
Published: 2002-12-31
Description: askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that does not exist, which generates an error message that reveals the full path.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/82/270970; http://www.ifrance.com/kitetoua/tuto/5holes4.txt; http://www.securityfocus.com/bid/4670
CVE: CVE-2002-1729
Published: 2002-12-31
Description: Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as other users via the "web site" parameter in a guestbook message.
CVSS Score: 6.8 (MEDIUM)
References: http://online.securityfocus.com/archive/82/270970; http://www.ifrance.com/kitetoua/tuto/5holes4.txt; http://www.securityfocus.com/bid/4671
CVE: CVE-2002-1730
Published: 2002-12-31
Description: ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true".
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/82/270970; http://www.ifrance.com/kitetoua/tuto/5holes4.txt; http://www.securityfocus.com/bid/4671
CVE: CVE-2002-1731
Published: 2002-12-31
Description: The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1003507; http://www.securityfocus.com/bid/4059; https://exchange.xforce.ibmcloud.com/vulnerabilities/8179
CVE: CVE-2002-1732
Published: 2002-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string argument to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) PRODREF parameter to ss000007.pl, or (4) hop parameter to ca000001.pl.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1003502; http://www.attrition.org/pipermail/vim/2006-July/000929.html; http://www.osvdb.org/27095
CVE: CVE-2002-1733
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/4109; http://www.sentinelchicken.com/advisories/prospero/; https://exchange.xforce.ibmcloud.com/vulnerabilities/8184
CVE: CVE-2002-1734
Published: 2002-12-31
Description: NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true".
CVSS Score: 10.0 (HIGH)
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/vuln-dev/2002-05/0135.html; http://www.securityfocus.com/bid/4672; https://exchange.xforce.ibmcloud.com/vulnerabilities/9007
CVE: CVE-2002-1735
Published: 2002-12-31
Description: Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors.
CVSS Score: 7.2 (HIGH)
References: http://securitytracker.com/id?1003493; http://www.securityfocus.com/bid/4043; https://exchange.xforce.ibmcloud.com/vulnerabilities/8186
CVE: CVE-2002-1736
Published: 2002-12-31
Description: Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via "unfiltered user input."
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1003506; https://exchange.xforce.ibmcloud.com/vulnerabilities/8187; http://securitytracker.com/id?1003506
CVE: CVE-2002-1737
Published: 2002-12-31
Description: Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files.
CVSS Score: 2.1 (LOW)
References: http://online.securityfocus.com/archive/1/256124; http://online.securityfocus.com/archive/1/256127; http://www.securityfocus.com/bid/4103
CVE: CVE-2002-1738
Published: 2002-12-31
Description: Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/271374; http://www.securityfocus.com/bid/4685; https://exchange.xforce.ibmcloud.com/vulnerabilities/9024
CVE: CVE-2002-1739
Published: 2002-12-31
Description: Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-326
References: http://online.securityfocus.com/archive/1/271374; http://www.securityfocus.com/bid/4686; https://exchange.xforce.ibmcloud.com/vulnerabilities/9025
CVE: CVE-2002-1740
Published: 2002-12-31
Description: Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter).
CVSS Score: 2.1 (LOW)
References: http://online.securityfocus.com/archive/1/271374; http://www.securityfocus.com/bid/4689; https://exchange.xforce.ibmcloud.com/vulnerabilities/9026
CVE: CVE-2002-1741
Published: 2002-12-31
Description: Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a ".." (dot dot) in the Attachments parameter.
CVSS Score: 7.2 (HIGH)
References: http://online.securityfocus.com/archive/1/271374; http://www.securityfocus.com/bid/4687; https://exchange.xforce.ibmcloud.com/vulnerabilities/9027
CVE: CVE-2002-1742
Published: 2002-12-31
Description: SOAP::Lite 0.50 through 0.52 allows remote attackers to load arbitrary Perl functions by suppling a non-existent function in a script using a SOAP::Lite module, which causes the AUTOLOAD subroutine to trigger.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A02.asc; http://online.securityfocus.com/archive/1/267051; http://use.perl.org/articles/02/04/09/000212.shtml?tid=5
CVE: CVE-2002-1743
Published: 2002-12-31
Description: AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/267656; http://www.securityfocus.com/bid/4514; https://exchange.xforce.ibmcloud.com/vulnerabilities/8843
CVE: CVE-2002-1744
Published: 2002-12-31
Description: Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded "%c0%ae%c0%ae" string, which is the Unicode representation for ".." (dot dot).
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/267945; http://online.securityfocus.com/archive/1/268065; http://www.securityfocus.com/bid/4525
CVE: CVE-2002-1745
Published: 2002-12-31
Description: Off-by-one error in the CodeBrws.asp sample script in Microsoft IIS 5.0 allows remote attackers to view the source code for files with extensions containing with one additional character after .html, .htm, .asp, or .inc, such as .aspx files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-193
References: http://online.securityfocus.com/archive/1/268303; http://www.securityfocus.com/bid/4543; https://exchange.xforce.ibmcloud.com/vulnerabilities/8853
CVE: CVE-2002-1746
Published: 2002-12-31
Description: Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/bugtraq/2002/Jan/0119.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/7870; http://seclists.org/bugtraq/2002/Jan/0119.html
CVE: CVE-2002-1747
Published: 2002-12-31
Description: Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB.
CVSS Score: 5.0 (MEDIUM)
References: http://seclists.org/bugtraq/2002/Jan/0119.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/7868; http://seclists.org/bugtraq/2002/Jan/0119.html
CVE: CVE-2002-1748
Published: 2002-12-31
Description: Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/archive/1/249355; http://www.securityfocus.com/bid/3839; https://exchange.xforce.ibmcloud.com/vulnerabilities/7863
CVE: CVE-2002-1749
Published: 2002-12-31
Description: Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges.
CVSS Score: 7.2 (HIGH)
References: http://www.ntbugtraq.com/default.aspx?pid=36&sid=1&A2=ind0202&L=ntbugtraq&T=0&O=D&F=N&P=5224; http://www.securityfocus.com/bid/4095; https://exchange.xforce.ibmcloud.com/vulnerabilities/8199
CVE: CVE-2002-1750
Published: 2002-12-31
Description: csGuestbook.cgi in CGISCRIPT.NET csGuestbook 1.0 allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html; http://www.securityfocus.com/bid/4448; https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
CVE: CVE-2002-1751
Published: 2002-12-31
Description: csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVSS Score: 5.0 (MEDIUM)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html; http://www.securityfocus.com/bid/4450; https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
CVE: CVE-2002-1752
Published: 2002-12-31
Description: csChatRBox.cgi in CGIScript.net csChat-R-Box allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html; http://www.securityfocus.com/bid/4452; https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
CVE: CVE-2002-1753
Published: 2002-12-31
Description: csNewsPro.cgi in CGIScript.net csNews Professional (csNewsPro) allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00106.html; http://www.securityfocus.com/bid/4451; https://exchange.xforce.ibmcloud.com/vulnerabilities/8636
CVE: CVE-2002-1754
Published: 2002-12-31
Description: Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar utility to force the client to resolve a large hostname.
CVSS Score: 2.1 (LOW)
References: http://support.novell.com/servlet/tidfinder/2962694; http://www.cqure.net/advisories.jsp?id=15; https://exchange.xforce.ibmcloud.com/vulnerabilities/9035
CVE: CVE-2002-1755
Published: 2002-12-31
Description: tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/249142; https://exchange.xforce.ibmcloud.com/vulnerabilities/7868; http://www.securityfocus.com/archive/1/249142
CVE: CVE-2002-1756
Published: 2002-12-31
Description: ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description field, which is not properly handled when the file properties of the file are viewed.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/271963; http://www.securityfocus.com/bid/4719; https://exchange.xforce.ibmcloud.com/vulnerabilities/9052
CVE: CVE-2002-1757
Published: 2002-12-31
Description: PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using "mail_send.php/sms".
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/269407; http://www.securityfocus.com/bid/4596; https://exchange.xforce.ibmcloud.com/vulnerabilities/8943
CVE: CVE-2002-1758
Published: 2002-12-31
Description: PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not verify if the user is logged in.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/269407; http://www.securityfocus.com/bid/4599; https://exchange.xforce.ibmcloud.com/vulnerabilities/8943
CVE: CVE-2002-1759
Published: 2002-12-31
Description: The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.
CVSS Score: 5.0 (MEDIUM)
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html; http://www.securityfocus.com/bid/4597; https://exchange.xforce.ibmcloud.com/vulnerabilities/8944
CVE: CVE-2002-1760
Published: 2002-12-31
Description: Multiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to execute arbitrary SQL commands via the unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html; http://www.securityfocus.com/bid/4598; https://exchange.xforce.ibmcloud.com/vulnerabilities/8945
CVE: CVE-2002-1761
Published: 2002-12-31
Description: Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences.
CVSS Score: 5.0 (MEDIUM)
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0362.html; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-04/0362.html
CVE: CVE-2002-1762
Published: 2002-12-31
Description: Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/269408; http://www.securityfocus.com/bid/4594; https://exchange.xforce.ibmcloud.com/vulnerabilities/8947
CVE: CVE-2002-1763
Published: 2002-12-31
Description: The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickly, which allows local users to access the current session.
CVSS Score: 4.6 (MEDIUM)
References: http://online.securityfocus.com/archive/1/277316; http://online.securityfocus.com/archive/1/277335; http://online.securityfocus.com/archive/1/277724
CVE: CVE-2002-1764
Published: 2002-12-31
Description: acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 2.1 (LOW)
References: http://online.securityfocus.com/archive/1/277932; http://www.securityfocus.com/bid/5068; https://exchange.xforce.ibmcloud.com/vulnerabilities/9407
CVE: CVE-2002-1765
Published: 2002-12-31
Description: Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed MIME header.
CVSS Score: 5.0 (MEDIUM)
References: http://mail.gnome.org/archives/gnome-announce-list/2002-May/msg00020.html; http://online.securityfocus.com/advisories/4117; http://rhn.redhat.com/errata/RHBA-2002-080.html
CVE: CVE-2002-1766
Published: 2002-12-31
Description: Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute.
CVSS Score: 4.6 (MEDIUM)
References: http://online.securityfocus.com/archive/1/276876; http://www.securityfocus.com/bid/5010; https://exchange.xforce.ibmcloud.com/vulnerabilities/9355
CVE: CVE-2002-1767
Published: 2002-12-31
Description: Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument.
CVSS Score: 7.2 (HIGH)
References: http://online.securityfocus.com/archive/1/265452; http://www.securityfocus.com/bid/4413; https://exchange.xforce.ibmcloud.com/vulnerabilities/8772