deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-0077
Published: 2003-03-18
Description: The hanterm (hanterm-xf) terminal emulator 2.0.5 and earlier, and possibly later versions, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0093.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1920&w=2; http://www.iss.net/security_center/static/11414.php
CVE: CVE-2003-0081
Published: 2003-03-18
Description: Format string vulnerability in packet-socks.c of the SOCKS dissector for Ethereal 0.8.7 through 0.9.9 allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000627; http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:051; http://seclists.org/lists/fulldisclosure/2003/Mar/0080.html
CVE: CVE-2003-0102
Published: 2003-03-18
Description: Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-003.txt.asc; http://lwn.net/Alerts/34908/; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1721&w=2
CVE: CVE-2003-0104
Published: 2003-03-18
Description: Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via the SchedulerTransfer servlet.
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21999; http://www.iss.net/security_center/static/10962.php; http://www.securityfocus.com/bid/7053
CVE: CVE-2003-0121
Published: 2003-03-18
Description: Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3607&w=2; http://www.securityfocus.com/archive/1/316311; http://www.securityfocus.com/bid/7044
CVE: CVE-2003-0122
Published: 2003-03-18
Description: Buffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0125.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9443&w=2; http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105101
CVE: CVE-2003-0123
Published: 2003-03-18
Description: Buffer overflow in Web Retriever client for Lotus Notes/Domino R4.5 through R6 allows remote malicious web servers to cause a denial of service (crash) via a long HTTP status line.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0368&w=2; http://www-1.ibm.com/support/docview.wss?rs=482&q=Domino&uid=swg21105060; http://www.cert.org/advisories/CA-2003-11.html
CVE: CVE-2003-0124
Published: 2003-03-18
Description: man before 1.5l allows attackers to execute arbitrary code via a malformed man file with improper quotes, which causes the my_xsprintf function to return a string with the value "unsafe," which is then executed as a program via a system call if it is in the search path of the user who runs man.
CVSS Score: 4.6 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000620; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5154&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2752&w=2
CVE: CVE-2003-0125
Published: 2003-03-18
Description: Buffer overflow in the web interface for SOHO Routefinder 550 before firmware 4.63 allows remote attackers to cause a denial of service (reboot) and execute arbitrary code via a long GET /OPTIONS value.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.multitech.com/Routers/RF550VPN.TXT; http://www.krusesecurity.dk/advisories/routefind550bof.txt; http://www.securityfocus.com/bid/7067
CVE: CVE-2003-0126
Published: 2003-03-18
Description: The web interface for SOHO Routefinder 550 firmware 4.63 and earlier, and possibly later versions, has a default "admin" account with a blank password, which could allow attackers on the LAN side to conduct unauthorized activities.
CVSS Score: 7.5 (HIGH)
References: http://www.krusesecurity.dk/advisories/routefind550bof.txt; http://www.krusesecurity.dk/advisories/routefind550bof.txt
CVE: CVE-2003-0137
Published: 2003-03-18
Description: SNMP daemon in the DX200 based network element for Nokia Serving GPRS support node (SGSN) allows remote attackers to read SNMP options via arbitrary community strings.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/8301; http://www.atstake.com/research/advisories/2003/a031303-2.txt; http://secunia.com/advisories/8301
CVE: CVE-2003-0143
Published: 2003-03-18
Description: The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3916&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0481&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4397&w=2
CVE: CVE-2003-1095
Published: 2003-03-18
Description: BEA WebLogic Server and Express 7.0 and 7.0.0.1, when using "memory" session persistence for web applications, does not clear authentication information when a web application is redeployed, which could allow users of that application to gain access without having to re-authenticate.
CVSS Score: 4.6 (MEDIUM)
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-27.jsp; http://www.kb.cert.org/vuls/id/691153; http://www.securityfocus.com/bid/7130
CVE: CVE-2003-1203
Published: 2003-03-18
Description: Cross-site scripting (XSS) vulnerability in index.php for Mambo Site Server 4.0.10 allows remote attackers to execute script on other clients via the ?option parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html; http://www.securityfocus.com/bid/7135; https://exchange.xforce.ibmcloud.com/vulnerabilities/11601
CVE: CVE-2003-1201
Published: 2003-03-20
Description: ldbm_back_exop_passwd in the back-ldbm backend in passwd.c for OpenLDAP 2.1.12 and earlier, when the slap_passwd_parse function does not return LDAP_SUCCESS, attempts to free an uninitialized pointer, which allows remote attackers to cause a denial of service (segmentation fault).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-824
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685; http://secunia.com/advisories/11261; http://secunia.com/advisories/9203
CVE: CVE-2003-0010
Published: 2003-03-24
Description: Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0139.html; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=26; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7645&w=2
CVE: CVE-2003-0011
Published: 2003-03-24
Description: Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/7145; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-009; http://www.securityfocus.com/bid/7145
CVE: CVE-2003-0128
Published: 2003-03-24
Description: The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malicious uuencoded (UUE) header, possibly triggering a heap-based buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0141.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000648; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7308&w=2
CVE: CVE-2003-0129
Published: 2003-03-24
Description: Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consumption) via a mail message that is uuencoded multiple times.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0141.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000648; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7308&w=2
CVE: CVE-2003-0130
Published: 2003-03-24
Description: The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0141.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000648; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7308&w=2
CVE: CVE-2003-0131
Published: 2003-03-24
Description: The SSL and TLS components for OpenSSL 0.9.6i and earlier, 0.9.7, and 0.9.7a allow remote attackers to perform an unauthorized RSA private key operation via a modified Bleichenbacher attack that uses a large number of SSL or TLS connections using PKCS #1 v1.5 padding that cause OpenSSL to leak information regarding the relationship between ciphertext and the associated plaintext, aka the "Klima-Pokorny-Rosa attack."
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-007.txt.asc; ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-014.0.txt; ftp://patches.sgi.com/support/free/security/advisories/20030501-01-I
CVE: CVE-2003-0138
Published: 2003-03-24
Description: Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4776&w=2; http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt; http://www.debian.org/security/2003/dsa-266
CVE: CVE-2003-0139
Published: 2003-03-24
Description: Certain weaknesses in the implementation of version 4 of the Kerberos protocol (krb4) in the krb5 distribution, when triple-DES keys are used to key krb4 services, allow an attacker to create krb4 tickets for unauthorized principals using a cut-and-paste attack and "ticket splicing."
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4776&w=2; http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-004-krb4.txt; http://www.debian.org/security/2003/dsa-266
CVE: CVE-2003-0140
Published: 2003-03-24
Description: Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs that use Mutt code such as Balsa before 2.0.10, allows a remote malicious IMAP server to cause a denial of service (crash) and possibly execute arbitrary code via a crafted folder.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000626; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000630; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1439&w=2
CVE: CVE-2003-0150
Published: 2003-03-24
Description: MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.
CVSS Score: 9.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000743; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2315&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3433&w=2
CVE: CVE-2003-0151
Published: 2003-03-24
Description: BEA WebLogic Server and Express 6.0 through 7.0 does not properly restrict access to certain internal servlets that perform administrative functions, which allows remote attackers to read arbitrary files or execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA03-28.jsp; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4620&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5384&w=2
CVE: CVE-2003-0156
Published: 2003-03-24
Description: Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via .. (dot dot) sequences in the v parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2492&w=2; http://www.debian.org/security/2003/dsa-264; http://www.securityfocus.com/bid/7062
CVE: CVE-2003-0157
Published: 2003-03-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2003-0138.  Reason: This candidate is a reservation duplicate of CVE-2003-0138 due to incomplete coordination.  Notes: All CVE users should reference CVE-2003-0138 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2003-0158
Published: 2003-03-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2003-0139.  Reason: This candidate is a reservation duplicate of CVE-2003-0139 due to incomplete coordination.  Notes: All CVE users should reference CVE-2003-0139 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2003-0028
Published: 2003-03-25
Description: Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in length fields, a different vulnerability than CVE-2002-0391.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc; http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0140.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3662&w=2
CVE: CVE-2003-1074
Published: 2003-03-28
Description: Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/8454/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-52111-1; http://www.ciac.org/ciac/bulletins/n-069.shtml
CVE: CVE-2002-1529
Published: 2003-03-31
Description: Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html; http://www.iss.net/security_center/static/10319.php; http://www.securityfocus.com/bid/5928
CVE: CVE-2002-1530
Published: 2003-03-31
Description: The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html; http://www.iss.net/security_center/static/10320.php; http://www.securityfocus.com/bid/5929
CVE: CVE-2002-1531
Published: 2003-03-31
Description: The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html; http://www.iss.net/security_center/static/10321.php; http://www.securityfocus.com/bid/5930
CVE: CVE-2002-1532
Published: 2003-03-31
Description: The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminating /r/n/r/n (CRLF) sequence, which causes the interface to wait for the sequence and blocks other users from accessing it.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0137.html; http://www.iss.net/security_center/static/10322.php; http://www.securityfocus.com/bid/5931
CVE: CVE-2002-1533
Published: 2003-03-31
Description: Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
CVSS Score: 5.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0337.html; http://www.iss.net/security_center/static/10219.php; http://www.securityfocus.com/bid/5821
CVE: CVE-2002-1534
Published: 2003-03-31
Description: Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0083.html; http://www.iss.net/security_center/static/10297.php; http://www.securityfocus.com/bid/5904
CVE: CVE-2002-1535
Published: 2003-03-31
Description: Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0190.html; http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11a.html; http://www.iss.net/security_center/static/10363.php
CVE: CVE-2002-1536
Published: 2003-03-31
Description: Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables in hpled.pl.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0028.html; http://online.securityfocus.com/archive/1/296163; http://www.iss.net/security_center/static/10397.php
CVE: CVE-2002-1537
Published: 2003-03-31
Description: admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0385.html; http://www.iss.net/security_center/static/10489.php; http://www.osvdb.org/4284
CVE: CVE-2002-1538
Published: 2003-03-31
Description: Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0366.html; http://www.iss.net/security_center/static/10473.php; http://www.securityfocus.com/bid/6048
CVE: CVE-2002-1539
Published: 2003-03-31
Description: Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0382.html; http://www.iss.net/security_center/static/10488.php; http://www.securityfocus.com/bid/6053
CVE: CVE-2002-1540
Published: 2003-03-31
Description: The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0346.html; http://archives.neohapsis.com/archives/bugtraq/2002-10/0369.html; http://www.iss.net/security_center/static/10475.php
CVE: CVE-2002-1541
Published: 2003-03-31
Description: BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0041.html; http://www.iss.net/security_center/static/10466.php; http://www.securityfocus.com/bid/6044
CVE: CVE-2002-1542
Published: 2003-03-31
Description: SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0344.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0040.html; http://www.iss.net/security_center/static/10462.php
CVE: CVE-2002-1543
Published: 2003-03-31
Description: Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-025.txt.asc; http://www.iss.net/security_center/static/10458.php; http://www.osvdb.org/7570
CVE: CVE-2002-1544
Published: 2003-03-31
Description: Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html; http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html
CVE: CVE-2002-1545
Published: 2003-03-31
Description: CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html; http://archives.neohapsis.com/archives/bugtraq/2002-10/0142.html
CVE: CVE-2002-1546
Published: 2003-03-31
Description: BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0043.html; http://www.iss.net/security_center/static/10467.php; http://www.securityfocus.com/bid/6041
CVE: CVE-2002-1547
Published: 2003-03-31
Description: Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-10/0443.html; http://archives.neohapsis.com/archives/bugtraq/2002-10/0446.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0053.html