deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-0617
Published: 2002-08-12
Description: The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."
CVSS Score: 5.1 (MEDIUM)
References: http://www.osvdb.org/5175; http://www.securityfocus.com/bid/5064; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031
CVE: CVE-2002-0618
Published: 2002-08-12
Description: The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]0377&w=2; http://www.guninski.com/ex%24el2.html; http://www.iss.net/security_center/static/9399.php
CVE: CVE-2002-0619
Published: 2002-08-12
Description: The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format, aka a "Variant of MS00-071, Word Mail Merge Vulnerability" (CVE-2000-0788).
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9862&w=2; http://www.iss.net/security_center/static/9077.php; http://www.securityfocus.com/bid/5066
CVE: CVE-2002-0638
Published: 2002-08-12
Description: setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh.
CVSS Score: 6.2 (MEDIUM)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-043.0.txt; http://archives.neohapsis.com/archives/bugtraq/2002-07/0357.html; http://archives.neohapsis.com/archives/bugtraq/2002-07/0396.html
CVE: CVE-2002-0644
Published: 2002-08-12
Description: Buffer overflow in several Database Consistency Checkers (DBCCs) for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows members of the db_owner and db_ddladmin roles to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038
CVE: CVE-2002-0645
Published: 2002-08-12
Description: SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-038
CVE: CVE-2002-0649
Published: 2002-08-12
Description: Multiple buffer overflows in the Resolution Service for Microsoft SQL Server 2000 and Microsoft Desktop Engine 2000 (MSDE) allow remote attackers to cause a denial of service or execute arbitrary code via UDP packets to port 1434 in which (1) a 0x04 byte that causes the SQL Monitor thread to generate a long registry key name, or (2) a 0x08 byte with a long string causes heap corruption, as exploited by the Slammer/Sapphire worm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1518&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]2411&w=2; http://secunia.com/advisories/7945
CVE: CVE-2002-0650
Published: 2002-08-12
Description: The keep-alive mechanism for Microsoft SQL Server 2000 allows remote attackers to cause a denial of service (bandwidth consumption) via a "ping" style packet to the Resolution Service (UDP port 1434) with a spoofed IP address of another SQL Server system, which causes the two servers to exchange packets in an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1518&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]2411&w=2; http://www.iss.net/security_center/static/9662.php
CVE: CVE-2002-0655
Published: 2002-08-12
Description: OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt; ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt; ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc
CVE: CVE-2002-0656
Published: 2002-08-12
Description: Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt; ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt; ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc
CVE: CVE-2002-0657
Published: 2002-08-12
Description: Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt; ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt; ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc
CVE: CVE-2002-0658
Published: 2002-08-12
Description: OSSP mm library (libmm) before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack.
CVSS Score: 6.2 (MEDIUM)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-032.0.txt; ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc; http://online.securityfocus.com/advisories/4392
CVE: CVE-2002-0659
Published: 2002-08-12
Description: The ASN1 library in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allows remote attackers to cause a denial of service via invalid encodings.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.0.txt; ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-033.1.txt; ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:33.openssl.asc
CVE: CVE-2002-0660
Published: 2002-08-12
Description: Buffer overflow in libpng 1.0.12-3.woody.2 and libpng3 1.2.1-1.1.woody.2 on Debian GNU/Linux 3.0, and other operating systems, may allow attackers to cause a denial of service and possibly execute arbitrary code, a different vulnerability than CVE-2002-0728.
CVSS Score: 7.5 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2002-151.html; http://rhn.redhat.com/errata/RHSA-2002-152.html; https://www.debian.org/security/2002/dsa-140
CVE: CVE-2002-0661
Published: 2002-08-12
Description: Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. (dot dot) sequences containing \ (backslash) characters.
CVSS Score: 7.5 (HIGH)
References: http://httpd.apache.org/info/security_bulletin_20020908a.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1436&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1052&w=2
CVE: CVE-2002-0684
Published: 2002-08-12
Description: Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000507; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1612&w=2; http://rhn.redhat.com/errata/RHSA-2002-139.html
CVE: CVE-2002-0695
Published: 2002-08-12
Description: Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/9734.php; http://www.nextgenss.com/advisories/mssql-ors.txt; http://www.securityfocus.com/bid/5372
CVE: CVE-2002-0697
Published: 2002-08-12
Description: Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
CVSS Score: 10.0 (HIGH)
References: http://www.iss.net/security_center/static/9657.php; http://www.securityfocus.com/bid/5308; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036
CVE: CVE-2002-0698
Published: 2002-08-12
Description: Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20759; http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ326322; http://www.iss.net/security_center/static/9658.php
CVE: CVE-2002-0700
Published: 2002-08-12
Description: Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise."
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/9783.php; http://www.osvdb.org/4862; http://www.securityfocus.com/bid/5420
CVE: CVE-2002-0710
Published: 2002-08-12
Description: Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8422&w=2; http://www.iss.net/security_center/static/9725.php; http://www.osvdb.org/3568
CVE: CVE-2002-0718
Published: 2002-08-12
Description: Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/9784.php; http://www.securityfocus.com/bid/5421; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041
CVE: CVE-2002-0719
Published: 2002-08-12
Description: SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/9785.php; http://www.securityfocus.com/bid/5422; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041
CVE: CVE-2002-0728
Published: 2002-08-12
Description: Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk.
CVSS Score: 5.0 (MEDIUM)
References: ftp://swrinde.nde.swri.edu/pub/png-group/archives/png-list.200207; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000512; http://rhn.redhat.com/errata/RHSA-2002-152.html
CVE: CVE-2002-0729
Published: 2002-08-12
Description: Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1518&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]2411&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1518&w=2
CVE: CVE-2002-0730
Published: 2002-08-12
Description: Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0309.html; http://www.iss.net/security_center/static/8916.php; http://www.securityfocus.com/bid/4566
CVE: CVE-2002-0731
Published: 2002-08-12
Description: Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0313.html; http://www.iss.net/security_center/static/8935.php; http://www.securityfocus.com/bid/4573
CVE: CVE-2002-0732
Published: 2002-08-12
Description: Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0422.html; http://www.iss.net/security_center/static/8968.php; http://www.levcgi.com/programs.cgi?program=myguestbook&action=history
CVE: CVE-2002-0733
Published: 2002-08-12
Description: Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0155.html; http://www.acme.com/software/thttpd/#releasenotes; http://www.ifrance.com/kitetoua/tuto/5holes1.txt
CVE: CVE-2002-0734
Published: 2002-08-12
Description: b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configurations, which allows remote attackers to execute arbitrary PHP code via a URL that sets the $b2inc variable to point to a malicious program stored on a remote server.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0027.html; http://cafelog.com/; http://www.iss.net/security_center/static/9013.php
CVE: CVE-2002-0735
Published: 2002-08-12
Description: Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]0932&w=2; http://online.securityfocus.com/archive/1/271173
CVE: CVE-2002-0736
Published: 2002-08-12
Description: Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0208.html; http://support.microsoft.com/support/kb/articles/q316/8/38.asp; http://www.iss.net/security_center/static/8862.php
CVE: CVE-2002-0737
Published: 2002-08-12
Description: Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) via DOS devices, using a URL that ends with a space and a null character.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0026.html; http://online.securityfocus.com/archive/1/268121; http://www.iss.net/security_center/static/8876.php
CVE: CVE-2002-0738
Published: 2002-08-12
Description: MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by (1) splitting the SCRIPT tag into smaller pieces, (2) including the script in a SRC argument to an IMG tag, or (3) using "&={script}" syntax.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0260.html; http://www.debian.org/security/2002/dsa-163; http://www.iss.net/security_center/static/8894.php
CVE: CVE-2002-0739
Published: 2002-08-12
Description: Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0288.html; http://www.iss.net/security_center/static/8899.php; http://www.securityfocus.com/bid/4563
CVE: CVE-2002-0740
Published: 2002-08-12
Description: Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0302.html; http://online.securityfocus.com/archive/1/269667; http://online.securityfocus.com/archive/1/270235
CVE: CVE-2002-0741
Published: 2002-08-12
Description: psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0322.html; http://online.securityfocus.com/archive/1/269131; http://www.iss.net/security_center/static/8912.php
CVE: CVE-2002-0742
Published: 2002-08-12
Description: Buffer overflow in pioout on AIX 4.3.3.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/aix/2002-q2/0005.html; http://archives.neohapsis.com/archives/aix/2002-q2/0005.html
CVE: CVE-2002-0743
Published: 2002-08-12
Description: mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/aix/2002-q2/0005.html; http://archives.neohapsis.com/archives/aix/2002-q2/0005.html
CVE: CVE-2002-0744
Published: 2002-08-12
Description: namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/aix/2002-q2/0005.html; http://archives.neohapsis.com/archives/aix/2002-q2/0005.html
CVE: CVE-2002-0745
Published: 2002-08-12
Description: Buffer overflow in uucp in AIX 4.3.3.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/aix/2002-q2/0005.html; http://archives.neohapsis.com/archives/aix/2002-q2/0005.html
CVE: CVE-2002-0746
Published: 2002-08-12
Description: Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/aix/2002-q2/0005.html; http://archives.neohapsis.com/archives/aix/2002-q2/0005.html
CVE: CVE-2002-0747
Published: 2002-08-12
Description: Buffer overflow in lsmcode in AIX 4.3.3.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/aix/2002-q2/0005.html; http://archives.neohapsis.com/archives/aix/2002-q2/0005.html
CVE: CVE-2002-0748
Published: 2002-08-12
Description: LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0323.html; http://digital.ni.com/public.nsf/websearch/4C3F86E655E[PII_REDACTED]BA00064B22F?OpenDocument; http://www.iss.net/security_center/static/8919.php
CVE: CVE-2002-0749
Published: 2002-08-12
Description: CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html; http://www.iss.net/security_center/static/8930.php; http://www.securityfocus.com/bid/4579
CVE: CVE-2002-0750
Published: 2002-08-12
Description: CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html; http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5; http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html
CVE: CVE-2002-0751
Published: 2002-08-12
Description: CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html; http://www.cgiscript.net/cgi-script/csNews/csNews.cgi?database=cgi.db&command=viewone&id=5; http://www.securityfocus.com/bid/4579
CVE: CVE-2002-0752
Published: 2002-08-12
Description: CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html; http://archives.neohapsis.com/archives/bugtraq/2002-04/0326.html
CVE: CVE-2002-0753
Published: 2002-08-12
Description: Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-04/0210.html; http://www.iss.net/security_center/static/8861.php; http://www.securityfocus.com/bid/4530
CVE: CVE-2002-0754
Published: 2002-08-12
Description: Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:07.k5su.asc; http://www.iss.net/security_center/static/7956.php; http://www.securityfocus.com/bid/3919
CVE: CVE-2002-0755
Published: 2002-08-12
Description: Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute commands as root.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:24.k5su.asc; http://www.iss.net/security_center/static/9125.php; http://www.osvdb.org/4893
CVE: CVE-2002-0756
Published: 2002-08-12
Description: Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-05/0040.html; http://www.iss.net/security_center/static/9036.php; http://www.securityfocus.com/bid/4694