deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-0214
Published: 2002-05-16
Description: Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key.
CVSS Score: 2.1 (LOW)
References: http://online.securityfocus.com/archive/1/252607; http://www.iss.net/security_center/static/8015.php; http://www.securityfocus.com/bid/3968
CVE: CVE-2002-0215
Published: 2002-05-16
Description: Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/252761; http://www.iss.net/security_center/static/8011.php; http://www.securityfocus.com/bid/3976
CVE: CVE-2002-0216
Published: 2002-05-16
Description: userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/252827; http://www.iss.net/security_center/static/8028.php; http://www.securityfocus.com/bid/3977
CVE: CVE-2002-0217
Published: 2002-05-16
Description: Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/252828; http://www.iss.net/security_center/static/8025.php; http://www.iss.net/security_center/static/8030.php
CVE: CVE-2002-0218
Published: 2002-05-16
Description: Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html; http://online.securityfocus.com/archive/1/252847; http://online.securityfocus.com/archive/1/252891
CVE: CVE-2002-0219
Published: 2002-05-16
Description: Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0032.html; http://online.securityfocus.com/archive/1/252847; http://online.securityfocus.com/archive/1/252891
CVE: CVE-2002-0220
Published: 2002-05-16
Description: phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/252918; http://www.iss.net/security_center/static/8019.php; http://www.securityfocus.com/bid/3982
CVE: CVE-2002-0221
Published: 2002-05-16
Description: Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/252944; http://www.iss.net/security_center/static/8020.php; http://www.securityfocus.com/bid/3983
CVE: CVE-2002-0222
Published: 2002-05-16
Description: Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/252944; http://www.iss.net/security_center/static/8021.php; http://www.securityfocus.com/bid/3986
CVE: CVE-2002-0223
Published: 2002-05-16
Description: Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends in a different extension.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/253172; http://www.iss.net/security_center/static/8022.php; http://www.securityfocus.com/bid/3993
CVE: CVE-2002-0224
Published: 2002-05-16
Description: The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/253360; http://online.securityfocus.com/archive/1/268593; http://www.iss.net/security_center/static/8046.php
CVE: CVE-2002-0225
Published: 2002-05-16
Description: tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files.
CVSS Score: 4.6 (MEDIUM)
References: http://online.securityfocus.com/archive/1/253288; http://www.iss.net/security_center/static/8061.php; http://www.securityfocus.com/bid/4003
CVE: CVE-2002-0226
Published: 2002-05-16
Description: retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9504&w=2; http://www.dcscripts.com/bugtrac/DCForumID7/3.html; http://www.iss.net/security_center/static/8044.php
CVE: CVE-2002-0227
Published: 2002-05-16
Description: KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0129&w=2; http://www.iss.net/security_center/static/8064.php; http://www.securityfocus.com/bid/4018
CVE: CVE-2002-0228
Published: 2002-05-16
Description: Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/254021; http://www.iss.net/security_center/static/8084.php; http://www.securityfocus.com/bid/4028
CVE: CVE-2002-0229
Published: 2002-05-16
Description: Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9716&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2321&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]5377&w=2
CVE: CVE-2002-0230
Published: 2002-05-16
Description: Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8701&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1873&w=2; http://sourceforge.net/mailarchive/forum.php?thread_id=464940&forum_id=6367
CVE: CVE-2002-0231
Published: 2002-05-16
Description: Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3955&w=2; http://online.securityfocus.com/archive/1/254105; http://www.iss.net/security_center/static/8083.php
CVE: CVE-2002-1056
Published: 2002-05-16
Description: Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8890&w=2; http://online.securityfocus.com/archive/1/265621; http://www.iss.net/security_center/static/8708.php
CVE: CVE-2002-1280
Published: 2002-05-17
Description: Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash).
CVSS Score: 5.0 (MEDIUM)
References: http://www.isskk.co.jp/support/XPressUpdates/RS/RS65ECSR15RNj.html; http://www.isskk.co.jp/support/XPressUpdates/RS/RS65ECSR15RNj.html
CVE: CVE-2001-1334
Published: 2002-05-19
Description: Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2001-05/0126.html; http://marc.info/?l=phpslash&m=[PII_REDACTED]4419&w=2; http://www.iss.net/security_center/static/9990.php
CVE: CVE-2001-1340
Published: 2002-05-21
Description: Beck GmbH IPC@Chip TelnetD service supports only one connection and does not disconnect a user who does not complete the login process, which allows remote attackers to lock out the administrator account by connecting to the service.
CVSS Score: 5.0 (MEDIUM)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00010.html; http://www.iss.net/security_center/static/6596.php; http://www.kb.cert.org/vuls/id/756019
CVE: CVE-2002-1638
Published: 2002-05-27
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-2153.  Reason: This candidate is a duplicate of CVE-2002-2153.  Notes: All CVE users should reference CVE-2002-2153 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2002-1641
Published: 2002-05-27
Description: Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.kb.cert.org/vuls/id/291555; http://www.nextgenss.com/vna/ora-webcache.txt; http://www.securityfocus.com/bid/4856
CVE: CVE-2002-1447
Published: 2002-05-28
Description: Buffer overflow in the vpnclient program for UNIX VPN Client before 3.5.2 allows local users to gain administrative privileges via a long profile name in a connect argument.
CVSS Score: 7.2 (HIGH)
References: http://online.securityfocus.com/archive/1/277653; http://sec.angrypacket.com/advisories/0002_AP.vpnclient.txt; http://www.cisco.com/warp/public/707/cisco-unix-vpnclient-buffer-overflow-pub.shtml
CVE: CVE-2002-0033
Published: 2002-05-29
Description: Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.html; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309; http://www.cert.org/advisories/CA-2002-11.html
CVE: CVE-2002-0155
Published: 2002-05-29
Description: Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1919&w=2; http://www.cert.org/advisories/CA-2002-13.html; http://www.iss.net/security_center/static/9041.php
CVE: CVE-2002-0169
Published: 2002-05-29
Description: The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier.
CVSS Score: 4.6 (MEDIUM)
References: http://online.securityfocus.com/advisories/4095; http://www.iss.net/security_center/static/8983.php; http://www.osvdb.org/5349
CVE: CVE-2002-0174
Published: 2002-05-29
Description: nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20020501-01-I; http://www.iss.net/security_center/static/8981.php; http://www.securityfocus.com/bid/4655
CVE: CVE-2002-0178
Published: 2002-05-29
Description: uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-040.0.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2432&w=2; http://online.securityfocus.com/advisories/4132
CVE: CVE-2002-0188
Published: 2002-05-29
Description: Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the second variant of the "Content Disposition" vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0126.html; http://www.iss.net/security_center/static/9086.php; http://www.lac.co.jp/security/english/snsadv_e/48_e.html
CVE: CVE-2002-0189
Published: 2002-05-29
Description: Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability.
CVSS Score: 7.5 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023
CVE: CVE-2002-0190
Published: 2002-05-29
Description: Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malformed web page that requires NetBIOS connectivity, aka "Zone Spoofing through Malformed Web Page" vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/9084.php; http://www.kb.cert.org/vuls/id/242891; http://www.securityfocus.com/bid/4753
CVE: CVE-2002-0191
Published: 2002-05-29
Description: Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0981&w=2; http://www.iss.net/security_center/static/8740.php; http://www.securityfocus.com/bid/4411
CVE: CVE-2002-0192
Published: 2002-05-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-0193, CVE-2002-1564.  Reason: This candidate was published with a description that identified a different vulnerability than what was identified in the original authoritative reference.  Notes: Consult CVE-2002-0193 or CVE-2002-1564 to find the identifier for the proper issue
CVE: CVE-2002-0193
Published: 2002-05-29
Description: Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/4752; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-023; https://exchange.xforce.ibmcloud.com/vulnerabilities/9085
CVE: CVE-2002-0232
Published: 2002-05-29
Description: Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9189&w=2; http://www.iss.net/security_center/static/8062.php; http://www.securityfocus.com/bid/4017
CVE: CVE-2002-0233
Published: 2002-05-29
Description: Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9975&w=2; http://www.iss.net/security_center/static/8079.php; http://www.securityfocus.com/bid/4029
CVE: CVE-2002-0234
Published: 2002-05-29
Description: NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service (resource exhaustion) via a port scan to an external network, which consumes all available connections.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8524&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5690&w=2; http://online.securityfocus.com/archive/1/254268
CVE: CVE-2002-0235
Published: 2002-05-29
Description: Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/254168; http://www.iss.net/security_center/static/8086.php; http://www.securityfocus.com/bid/4030
CVE: CVE-2002-0236
Published: 2002-05-29
Description: Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7698&w=2; http://www.iss.net/security_center/static/7936.php; http://www.securityfocus.com/bid/3784
CVE: CVE-2002-0237
Published: 2002-05-29
Description: Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4301&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3268&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7452&w=2
CVE: CVE-2002-0238
Published: 2002-05-29
Description: Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to execute arbitrary script on another client via a URL that contains the script.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3461&w=2; http://www.iss.net/security_center/static/8082.php; http://www.securityfocus.com/bid/4024
CVE: CVE-2002-0239
Published: 2002-05-29
Description: Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:41.hanterm.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6455&w=2; http://online.securityfocus.com/archive/1/255168
CVE: CVE-2002-0240
Published: 2002-05-29
Description: PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1160&w=2; http://www.iss.net/security_center/static/8119.php; http://www.securityfocus.com/bid/4057
CVE: CVE-2002-0241
Published: 2002-05-29
Description: NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.
CVSS Score: 7.5 (HIGH)
References: http://www.cisco.com/warp/public/707/ciscosecure-acs-nds-authentication-vuln-pub.shtml; http://www.iss.net/security_center/static/8106.php; http://www.securityfocus.com/bid/4048
CVE: CVE-2002-0242
Published: 2002-05-29
Description: Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9138&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9138&w=2
CVE: CVE-2002-0243
Published: 2002-05-29
Description: Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9138&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9138&w=2
CVE: CVE-2002-0244
Published: 2002-05-29
Description: Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot dot) in the pathname argument to chdir.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1303&w=2; http://www.securityfocus.com/bid/4051; https://exchange.xforce.ibmcloud.com/vulnerabilities/8108
CVE: CVE-2002-0245
Published: 2002-05-29
Description: Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4716&w=2; http://www-1.ibm.com/support/manager.wss?rs=1&rt=0&org=sims&doc=07B32060E4CC97E985256B64005AEB0F; http://www.iss.net/security_center/static/8160.php
CVE: CVE-2002-0246
Published: 2002-05-29
Description: Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint.
CVSS Score: 7.2 (HIGH)
References: ftp://stage.caldera.com/pub/security/unixware/CSSA-2002-SCO.3/CSSA-2002-SCO.3.txt; http://online.securityfocus.com/archive/1/255414; http://www.iss.net/security_center/static/8113.php
CVE: CVE-2002-0247
Published: 2002-05-29
Description: Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://www.debian.org/security/2002/dsa-108; http://www.iss.net/security_center/static/8111.php; http://www.securityfocus.com/bid/4054
CVE: CVE-2002-0248
Published: 2002-05-29
Description: wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file.
CVSS Score: 7.2 (HIGH)
References: http://www.debian.org/security/2002/dsa-108; http://www.iss.net/security_center/static/8110.php; http://www.securityfocus.com/bid/4052