deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-1121
Published: 2002-09-24
Description: SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0134.html; http://archives.neohapsis.com/archives/bugtraq/2002-09/0135.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0113.html
CVE: CVE-2002-1122
Published: 2002-09-24
Description: Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.
CVSS Score: 7.5 (HIGH)
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21165; http://www.iss.net/security_center/static/10130.php; http://www.osvdb.org/3150
CVE: CVE-2002-1123
Published: 2002-09-24
Description: Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5020&w=2; http://online.securityfocus.com/archive/1/286220; http://www.ciac.org/ciac/bulletins/n-003.shtml
CVE: CVE-2002-1124
Published: 2002-09-24
Description: Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.
CVSS Score: 7.2 (HIGH)
References: http://www.debian.org/security/2002/dsa-166; http://www.iss.net/security_center/static/10100.php; http://www.securityfocus.com/bid/5702
CVE: CVE-2002-1125
Published: 2002-09-24
Description: FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:39.libkvm.asc; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0115.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3310&w=2
CVE: CVE-2002-1126
Published: 2002-09-24
Description: Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
CVSS Score: 2.6 (LOW)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=145579; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4720&w=2; http://www.iss.net/security_center/static/10084.php
CVE: CVE-2002-1593
Published: 2002-09-25
Description: mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1005285; http://www.apache.org/dist/httpd/CHANGES_2.0; http://www.kb.cert.org/vuls/id/406121
CVE: CVE-2002-1642
Published: 2002-10-03
Description: PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (data loss) via the VACUUM command.
CVSS Score: 7.2 (HIGH)
References: http://archives.postgresql.org/pgsql-announce/2002-10/msg00000.php; http://www.kb.cert.org/vuls/id/891177; http://www.redhat.com/support/errata/RHSA-2003-001.html
CVE: CVE-2002-0384
Published: 2002-10-04
Description: Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:054; http://online.securityfocus.com/advisories/4358; http://www.iss.net/security_center/static/9766.php
CVE: CVE-2002-0662
Published: 2002-10-04
Description: scrollkeeper-get-cl in ScrollKeeper 0.3 to 0.3.11 allows local users to create and overwrite files via a symlink attack on the scrollkeeper-tempfile.x temporary files.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6031&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2294&w=2; http://www.debian.org/security/2002/dsa-160
CVE: CVE-2002-0664
Published: 2002-10-04
Description: The default Access Control Lists (ACLs) of the administration database for ZMerge 4.x and 5.x provides arbitrary users (including anonymous users) with Manager level access, which allows the users to read or modify import/export scripts.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1846&w=2; http://www.iss.net/security_center/static/10057.php; http://www.securityfocus.com/bid/5101
CVE: CVE-2002-0696
Published: 2002-10-04
Description: Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames.
CVSS Score: 7.5 (HIGH)
References: http://www.ciac.org/ciac/bulletins/m-120.shtml; http://www.iss.net/security_center/static/10035.php; http://www.securityfocus.com/bid/5633
CVE: CVE-2002-0699
Published: 2002-10-04
Description: Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
CVSS Score: 5.0 (MEDIUM)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-048; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A190; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-048
CVE: CVE-2002-0835
Published: 2002-10-04
Description: Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-044.0.txt; http://online.securityfocus.com/advisories/4449; http://www.iss.net/security_center/static/10003.php
CVE: CVE-2002-0837
Published: 2002-10-04
Description: wordtrans 1.1pre8 and earlier in the wordtrans-web package allows remote attackers to (1) execute arbitrary code or (2) conduct cross-site scripting attacks via certain parameters (possibly "dict") to the wordtrans.php script.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1137&w=2; http://rhn.redhat.com/errata/RHSA-2002-188.html; http://www.guardent.com/comp_news_wordtrans-web.html#
CVE: CVE-2002-0850
Published: 2002-10-04
Description: Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0106.html; http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1.1/pgphotfix_outlookplugin711/ReadMe.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0090&w=2
CVE: CVE-2002-0862
Published: 2002-10-04
Description: The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1995&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5308&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0450&w=2
CVE: CVE-2002-0876
Published: 2002-10-04
Description: Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html; http://online.securityfocus.com/archive/1/281265; http://www.iss.net/security_center/static/9225.php
CVE: CVE-2002-0877
Published: 2002-10-04
Description: Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html; http://www.iss.net/security_center/static/9224.php; http://www.securityfocus.com/bid/4896
CVE: CVE-2002-0878
Published: 2002-10-04
Description: SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0010.html; http://www.iss.net/security_center/static/9268.php; http://www.securityfocus.com/bid/4931
CVE: CVE-2002-0879
Published: 2002-10-04
Description: showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0256.html; http://www.iss.net/security_center/static/9196.php; http://www.securityfocus.com/bid/4882
CVE: CVE-2002-0880
Published: 2002-10-04
Description: Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demonstrated by (1) "jolt", (2) "jolt2", (3) "raped", (4) "hping2", (5) "bloop", (6) "bubonic", (7) "mutant", (8) "trash", and (9) "trash2."
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml; http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml
CVE: CVE-2002-0881
Published: 2002-10-04
Description: Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings.
CVSS Score: 2.1 (LOW)
References: http://online.securityfocus.com/archive/1/273673; http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml; http://www.iss.net/security_center/static/9144.php
CVE: CVE-2002-0882
Published: 2002-10-04
Description: The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
CVSS Score: 6.4 (MEDIUM)
References: http://online.securityfocus.com/archive/1/273673; http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml; http://www.iss.net/security_center/static/9142.php
CVE: CVE-2002-0883
Published: 2002-10-04
Description: Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.
CVSS Score: 7.2 (HIGH)
References: http://ftp.support.compaq.com/patches/.new/html/SSRT2179.shtml; http://www.iss.net/security_center/static/9202.php; http://www.securityfocus.com/bid/4802
CVE: CVE-2002-0884
Published: 2002-10-04
Description: Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt; http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html; http://online.securityfocus.com/archive/1/273584
CVE: CVE-2002-0885
Published: 2002-10-04
Description: Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt; http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html; http://online.securityfocus.com/archive/1/273584
CVE: CVE-2002-0886
Published: 2002-10-04
Description: Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/CBOS-DoS.shtml; http://www.iss.net/security_center/static/9151.php; http://www.iss.net/security_center/static/9153.php
CVE: CVE-2002-0887
Published: 2002-10-04
Description: scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.
CVSS Score: 2.1 (LOW)
References: ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9869&w=2; http://www.iss.net/security_center/static/9210.php
CVE: CVE-2002-0888
Published: 2002-10-04
Description: 3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0230.html; http://archives.neohapsis.com/archives/bugtraq/2002-06/0102.html; http://www.iss.net/security_center/static/9185.php
CVE: CVE-2002-0889
Published: 2002-10-04
Description: Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=vuln-dev&m=[PII_REDACTED]2457&w=2; http://online.securityfocus.com/archive/1/269969; http://www.iss.net/security_center/static/8949.php
CVE: CVE-2002-0891
Published: 2002-10-04
Description: The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/274240; http://www.iss.net/security_center/static/9186.php; http://www.netscreen.com/support/ns25_reboot.html
CVE: CVE-2002-0892
Published: 2002-10-04
Description: The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html; http://online.securityfocus.com/archive/1/273615; http://www.iss.net/security_center/static/9139.php
CVE: CVE-2002-0893
Published: 2002-10-04
Description: Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html; http://online.securityfocus.com/archive/1/273615; http://www.iss.net/security_center/static/9140.php
CVE: CVE-2002-0894
Published: 2002-10-04
Description: NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html; http://online.securityfocus.com/archive/1/273615; http://www.iss.net/security_center/static/9141.php
CVE: CVE-2002-0895
Published: 2002-10-04
Description: Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/273581; http://www.iss.net/security_center/static/9138.php; http://www.securityfocus.com/bid/4792
CVE: CVE-2002-0896
Published: 2002-10-04
Description: The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/272582; http://www.iss.net/security_center/static/9100.php; http://www.securityfocus.com/bid/4746
CVE: CVE-2002-0897
Published: 2002-10-04
Description: LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0079.html; http://online.securityfocus.com/archive/1/274020; http://www.iss.net/security_center/static/9165.php
CVE: CVE-2002-0898
Published: 2002-10-04
Description: Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]0402&w=2; http://online.securityfocus.com/archive/1/274202; http://www.iss.net/security_center/static/9188.php
CVE: CVE-2002-0899
Published: 2002-10-04
Description: Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0084.html; http://online.securityfocus.com/archive/1/274205; http://www.iss.net/security_center/static/9179.php
CVE: CVE-2002-0900
Published: 2002-10-04
Description: Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup capability.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/274107; http://www.iss.net/security_center/static/9171.php; http://www.rubin.ch/pgp/src/patch_buffoverflow20020525
CVE: CVE-2002-0901
Published: 2002-10-04
Description: Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar.
CVSS Score: 10.0 (HIGH)
References: http://online.securityfocus.com/archive/1/274215; http://www.iss.net/security_center/static/9181.php; http://www.iss.net/security_center/static/9182.php
CVE: CVE-2002-0902
Published: 2002-10-04
Description: Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/274273; http://www.iss.net/security_center/static/9178.php; http://www.securityfocus.com/bid/4858
CVE: CVE-2002-0903
Published: 2002-10-04
Description: register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack on the new user ID and the code value.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/274269; http://www.iss.net/security_center/static/9177.php; http://www.securityfocus.com/bid/4859
CVE: CVE-2002-0904
Published: 2002-10-04
Description: SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0259.html; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]6080&w=2; http://www.iss.net/security_center/static/9213.php
CVE: CVE-2002-0905
Published: 2002-10-04
Description: Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0270.html; http://www.iss.net/security_center/static/9219.php; http://www.securityfocus.com/bid/4891
CVE: CVE-2002-0906
Published: 2002-10-04
Description: Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/9443.php; http://www.kb.cert.org/vuls/id/814627; http://www.securityfocus.com/bid/5122
CVE: CVE-2002-0907
Published: 2002-10-04
Description: Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0016.html; http://www.iss.net/security_center/static/9251.php; http://www.securityfocus.com/bid/4934
CVE: CVE-2002-0908
Published: 2002-10-04
Description: Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0214.html; http://www.iss.net/security_center/static/9174.php; http://www.securityfocus.com/bid/4760
CVE: CVE-2002-0909
Published: 2002-10-04
Description: Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments (2) -f, (3) -n, (4) -D, (5) -M, or (6) -P, or via long environment variables (7) JNAMES or (8) MAILSERVER.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0287.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1275&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]3103&w=2