deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-0962
Published: 2002-10-04
Description: Cross-site scripting vulnerabilities in GeekLog 1.3.5 and earlier allow remote attackers to execute arbitrary script via (1) the url variable in the Link field of a calendar event, (2) the topic parameter in index.php, or (3) the title parameter in comment.php.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html; http://geeklog.sourceforge.net/article.php?story=[PII_REDACTED]3358149; http://www.iss.net/security_center/static/9309.php
CVE: CVE-2002-0963
Published: 2002-10-04
Description: SQL injection vulnerability in comment.php for GeekLog 1.3.5 and earlier allows remote attackers to obtain sensitive user information via the pid parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0058.html; http://geeklog.sourceforge.net/article.php?story=[PII_REDACTED]3358149; http://www.iss.net/security_center/static/9311.php
CVE: CVE-2002-0964
Published: 2002-10-04
Description: Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge with different cd_key values, which reaches the player limit and prevents other players from connecting until the original responses have timed out.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0248.html; http://www.iss.net/security_center/static/9412.php; http://www.securityfocus.com/bid/5076
CVE: CVE-2002-0965
Published: 2002-10-04
Description: Buffer overflow in TNS Listener for Oracle 9i Database Server on Windows systems, and Oracle 8 on VM, allows local users to execute arbitrary code via a long SERVICE_NAME parameter, which is not properly handled when writing an error message to a log file.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0096.html; http://online.securityfocus.com/archive/1/276526; http://otn.oracle.com/deploy/security/pdf/net9_dos_alert.pdf
CVE: CVE-2002-0966
Published: 2002-10-04
Description: Buffer overflow in 4D web server 6.7.3 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0208.html; http://www.iss.net/security_center/static/9374.php; http://www.securityfocus.com/bid/5045
CVE: CVE-2002-0967
Published: 2002-10-04
Description: Buffer overflow in eDonkey 2000 35.16.60 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long "ed2k:" URL.
CVSS Score: 7.5 (HIGH)
References: http://online.securityfocus.com/archive/1/275708; http://www.edonkey2000.com/; http://www.iss.net/security_center/static/9278.php
CVE: CVE-2002-0968
Published: 2002-10-04
Description: Buffer overflow in AnalogX SimpleServer:WWW 1.16 and earlier allows remote attackers to cause a denial of service (crash) and execute code via a long HTTP request method name.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0106.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8443&w=2; http://www.analogx.com/contents/download/network/sswww.htm
CVE: CVE-2002-0991
Published: 2002-10-04
Description: Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0300.html; http://archives.neohapsis.com/archives/hp/2002-q3/0016.html; http://www.iss.net/security_center/static/9431.php
CVE: CVE-2002-0992
Published: 2002-10-04
Description: Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies internal data.
CVSS Score: 2.1 (LOW)
References: http://online.securityfocus.com/advisories/4258; http://www.iss.net/security_center/static/9475.php; http://www.securityfocus.com/bid/5143
CVE: CVE-2002-0993
Published: 2002-10-04
Description: Unknown vulnerability in HP Instant Support Enterprise Edition (ISEE) product U2512A for HP-UX 11.00 and 11.11 may allow authenticated users to access restricted files.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/hp/2002-q3/0023.html; http://www.iss.net/security_center/static/9620.php; http://www.securityfocus.com/bid/5267
CVE: CVE-2002-0994
Published: 2002-10-04
Description: SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0003.html; http://www.iss.net/security_center/static/9476.php; http://www.securityfocus.com/bid/5146
CVE: CVE-2002-0995
Published: 2002-10-04
Description: login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0014.html; http://www.iss.net/security_center/static/9462.php; http://www.phpauction.org/viewnew.php?id=5
CVE: CVE-2002-0996
Published: 2002-10-04
Description: Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) WebAdmin or (2) ModWeb.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0153.html; http://support.novell.com/servlet/tidfinder/2963051; http://www.iss.net/security_center/static/9560.php
CVE: CVE-2002-0997
Published: 2002-10-04
Description: Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0152.html; http://support.novell.com/servlet/tidfinder/2962974; http://www.iss.net/security_center/static/9559.php
CVE: CVE-2002-0998
Published: 2002-10-04
Description: Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbitrary files via .. (dot dot) sequences and null characters in the lang parameter, which is processed by a call to the include function.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html; http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en; http://www.iss.net/security_center/static/9552.php
CVE: CVE-2002-0999
Published: 2002-10-04
Description: Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0128.html; http://www.care2x.com/modul.php?thispage=headlines&m_titel=NEWS&m_item=Headlines&lang=en; http://www.iss.net/security_center/static/9553.php
CVE: CVE-2002-1000
Published: 2002-10-04
Description: Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long request to TCP port 8001.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0338.html; http://www.analogx.com/contents/download/network/ssshout.htm; http://www.iss.net/security_center/static/9427.php
CVE: CVE-2002-1001
Published: 2002-10-04
Description: Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A request to TCP port 1080 with a long DNS hostname.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0006.html; http://www.analogx.com/contents/download/network/proxy.htm; http://www.iss.net/security_center/static/9455.php
CVE: CVE-2002-1002
Published: 2002-10-04
Description: Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a long user name.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-08/0093.html; http://online.securityfocus.com/archive/1/279683; http://www.iss.net/security_center/static/9444.php
CVE: CVE-2002-1003
Published: 2002-10-04
Description: Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0073.html; http://www.iss.net/security_center/static/9501.php; http://www.securityfocus.com/bid/5184
CVE: CVE-2002-1004
Published: 2002-10-04
Description: Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0029.html; http://www.argosoft.com/applications/mailserver/changelist.asp; http://www.iss.net/security_center/static/9477.php
CVE: CVE-2002-1005
Published: 2002-10-04
Description: ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forwarding the email to the user while autoresponse is enabled, which creates an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0515.html; http://www.iss.net/security_center/static/9759.php; http://www.securityfocus.com/bid/5395
CVE: CVE-2002-1006
Published: 2002-10-04
Description: Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0002.html; http://www.bbc.co.uk/education/betsie/parser.pl.txt; http://www.iss.net/security_center/static/9468.php
CVE: CVE-2002-1007
Published: 2002-10-04
Description: Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login.pl, (2) the CTID parameter in ProcessInfo.cgi, or (3) the Message parameter in index.cgi.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0005.html; http://www.iss.net/security_center/static/9467.php; http://www.securityfocus.com/bid/5137
CVE: CVE-2002-1008
Published: 2002-10-04
Description: Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-06/0332.html; http://archives.neohapsis.com/archives/bugtraq/2002-07/0072.html; http://www.iss.net/security_center/static/9445.php
CVE: CVE-2002-1009
Published: 2002-10-04
Description: Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0112.html; http://www.iss.net/security_center/static/9548.php; http://www.securityfocus.com/bid/5211
CVE: CVE-2002-1010
Published: 2002-10-04
Description: Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0001.html; http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0001.html
CVE: CVE-2002-1011
Published: 2002-10-04
Description: Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0023.html; http://online.securityfocus.com/archive/1/282292; http://www.iss.net/security_center/static/9555.php
CVE: CVE-2002-1012
Published: 2002-10-04
Description: Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0024.html; http://online.securityfocus.com/archive/1/282283; http://www.iss.net/security_center/static/9556.php
CVE: CVE-2002-1013
Published: 2002-10-04
Description: Buffer overflow in traffic_manager for Inktomi Traffic Server 4.0.18 through 5.2.2, Traffic Edge 1.1.2 and 1.5.0, and Media-IXT 3.0.4 allows local users to gain root privileges via a long -path argument.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0023.html; http://support.inktomi.com/kb/070202-003.html; http://www.iss.net/security_center/static/9465.php
CVE: CVE-2002-1014
Published: 2002-10-04
Description: Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0127.html; http://service.real.com/help/faq/security/bufferoverrun07092002.html; http://www.iss.net/security_center/static/9538.php
CVE: CVE-2002-1015
Published: 2002-10-04
Description: RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0130.html; http://service.real.com/help/faq/security/bufferoverrun07092002.html; http://www.iss.net/security_center/static/9539.php
CVE: CVE-2002-1016
Published: 2002-10-04
Description: Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing the operations, and restoring the original data files.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000177.html; http://www.iss.net/security_center/static/9634.php; http://www.kb.cert.org/vuls/id/438867
CVE: CVE-2002-1017
Published: 2002-10-04
Description: Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge, and using the appropriate hash function to generate the activation code.
CVSS Score: 2.1 (LOW)
References: http://online.securityfocus.com/archive/1/285093; http://www.iss.net/security_center/static/9740.php; http://www.securityfocus.com/bid/5358
CVE: CVE-2002-1018
Published: 2002-10-04
Description: The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service (resource exhaustion) by checking out the same book multiple times.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]8643&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]8760&w=2
CVE: CVE-2002-1019
Published: 2002-10-04
Description: The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]8643&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]8760&w=2
CVE: CVE-2002-1020
Published: 2002-10-04
Description: The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the "Add to bookbag" feature when the server reports that no more copies are available.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]8643&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]8760&w=2
CVE: CVE-2002-1021
Published: 2002-10-04
Description: BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html; http://www.iss.net/security_center/static/9557.php; http://www.securityfocus.com/bid/5226
CVE: CVE-2002-1022
Published: 2002-10-04
Description: BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html; http://www.iss.net/security_center/static/9558.php; http://www.securityfocus.com/bid/5228
CVE: CVE-2002-1023
Published: 2002-10-04
Description: BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0082.html; http://archives.neohapsis.com/archives/bugtraq/2002-07/0143.html; http://www.iss.net/security_center/static/9528.php
CVE: CVE-2002-1024
Published: 2002-10-04
Description: Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).
CVSS Score: 7.1 (HIGH)
CWE: CWE-399
References: http://www.cisco.com/warp/public/707/SSH-scanning.shtml; http://www.iss.net/security_center/static/9437.php; http://www.kb.cert.org/vuls/id/290140
CVE: CVE-2002-1025
Published: 2002-10-04
Description: JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0138.html; http://online.securityfocus.com/archive/1/280062; http://www.iss.net/security_center/static/9459.php
CVE: CVE-2002-1026
Published: 2002-10-04
Description: Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0140.html; http://online.securityfocus.com/archive/1/280079; http://www.iss.net/security_center/static/9458.php
CVE: CVE-2002-1027
Published: 2002-10-04
Description: Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0029.html; http://online.securityfocus.com/archive/1/282742; http://www.iss.net/security_center/static/9588.php
CVE: CVE-2002-1028
Published: 2002-10-04
Description: Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0175.html; http://www.iss.net/security_center/static/9585.php; http://www.oddsock.org/tools/gen_songrequester/#Release%202.2%20Notes%20:
CVE: CVE-2002-1029
Published: 2002-10-04
Description: Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a malformed request to TCP port 17990.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0048.html; http://www.iss.net/security_center/static/9490.php; http://www.osvdb.org/14478
CVE: CVE-2002-1030
Published: 2002-10-04
Description: Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.
CVSS Score: 2.6 (LOW)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0008.html; http://dev2dev.bea.com/resourcelibrary/advisoriesdetail.jsp?highlight=advisoriesnotifications&path=components%2Fdev2dev%2Fresourcelibrary%2Fadvisoriesnotifications%2Fadvisory_BEA02-19.htm; http://online.securityfocus.com/archive/1/281046
CVE: CVE-2002-1031
Published: 2002-10-04
Description: KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0007.html; http://online.securityfocus.com/archive/1/281102; http://www.iss.net/security_center/static/9500.php
CVE: CVE-2002-1032
Published: 2002-10-04
Description: Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.
CVSS Score: 7.5 (HIGH)
References: http://www.keyfocus.net/kfws/support/; http://www.keyfocus.net/kfws/support/
CVE: CVE-2002-1033
Published: 2002-10-04
Description: Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence (dot-dot variant) in the argument.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/281786; http://www.iss.net/security_center/static/9549.php; http://www.securityfocus.com/bid/5209
CVE: CVE-2002-1034
Published: 2002-10-04
Description: none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument.
CVSS Score: 10.0 (HIGH)
References: http://online.securityfocus.com/archive/1/281786; http://www.iss.net/security_center/static/9549.php; http://www.securityfocus.com/bid/5209
CVE: CVE-2002-1035
Published: 2002-10-04
Description: Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/archive/1/280132; http://www.iss.net/security_center/static/9457.php; http://www.osvdb.org/5000
CVE: CVE-2002-1036
Published: 2002-10-04
Description: Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Match parameters.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-07/0094.html; http://archives.neohapsis.com/archives/bugtraq/2002-07/0096.html; http://www.iss.net/security_center/static/9533.php