deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-0865
Published: 2002-10-11
Description: A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."
CVSS Score: 7.5 (HIGH)
References: http://www.iss.net/security_center/static/10135.php; http://www.kb.cert.org/vuls/id/140898; http://www.securityfocus.com/bid/5752
CVE: CVE-2002-0866
Published: 2002-10-11
Description: Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-09/0271.html; http://www.iss.net/security_center/static/10133.php; http://www.kb.cert.org/vuls/id/307306
CVE: CVE-2002-0867
Published: 2002-10-11
Description: Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw."
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10134.php; http://www.kb.cert.org/vuls/id/792881; http://www.securityfocus.com/bid/5750
CVE: CVE-2002-0969
Published: 2002-10-11
Description: Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0004.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1935&w=2; http://www.iss.net/security_center/static/10243.php
CVE: CVE-2002-1137
Published: 2002-10-11
Description: Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data source" such as FoxPro, a variant of CAN-2002-0644.
CVSS Score: 7.5 (HIGH)
References: http://www.ciac.org/ciac/bulletins/n-003.shtml; http://www.cisco.com/warp/public/707/cisco-sa-20030126-ms02-061.shtml; http://www.scan-associates.net/papers/foxpro.txt
CVE: CVE-2002-1138
Published: 2002-10-11
Description: Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under its own privileges instead of the entity that launched it, which allows attackers to overwrite system files, aka "Flaw in Output File Handling for Scheduled Jobs."
CVSS Score: 7.5 (HIGH)
References: http://www.ciac.org/ciac/bulletins/n-003.shtml; http://www.iss.net/security_center/static/10257.php; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-056
CVE: CVE-2002-1139
Published: 2002-10-11
Description: The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target Path for Zipped File Decompression."
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10252.php; http://www.securityfocus.com/bid/5876; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054
CVE: CVE-2002-1140
Published: 2002-10-11
Description: The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service (service hang) via malformed packet fragments, aka "Improper parameter size check leading to denial of service."
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10258.php; http://www.securityfocus.com/bid/5879; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057
CVE: CVE-2002-1141
Published: 2002-10-11
Description: An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC request."
CVSS Score: 5.0 (MEDIUM)
References: http://www.iss.net/security_center/static/10259.php; http://www.securityfocus.com/bid/5880; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-057
CVE: CVE-2002-1146
Published: 2002-10-11
Description: The BIND 4 and BIND 8.2.x stub resolver libraries, and other libraries such as glibc 2.2.5 and earlier, libc, and libresolv, use the maximum buffer size instead of the actual size when processing a DNS response, which causes the stub resolvers to read past the actual boundary ("read buffer overflow"), allowing remote attackers to cause a denial of service (crash).
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-015.txt.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000535; http://www.iss.net/security_center/static/10295.php
CVE: CVE-2002-1147
Published: 2002-10-11
Description: The HTTP administration interface for HP Procurve 4000M Switch firmware before C.09.16, with stacking features and remote administration enabled, does not authenticate requests to reset the device, which allows remote attackers to cause a denial of service via a direct request to the device_reset CGI program.
CVSS Score: 7.1 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0420&w=2; http://online.securityfocus.com/advisories/4501; http://www.iss.net/security_center/static/10172.php
CVE: CVE-2002-1148
Published: 2002-10-11
Description: The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4253&w=2; http://online.securityfocus.com/advisories/4758; http://www.debian.org/security/2002/dsa-170
CVE: CVE-2002-1149
Published: 2002-10-11
Description: The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9197&w=2; http://www.iss.net/security_center/static/10178.php; http://www.osvdb.org/3356
CVE: CVE-2002-1150
Published: 2002-10-11
Description: The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396) allows attackers with physical access to hijack remote sessions by entering certain logoff or shutdown sequences (such as CTRL-ALT-DEL) and canceling out of the resulting user confirmation prompts, such as when the remote user is editing a document.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6204&w=2; http://www.iss.net/security_center/static/10119.php; http://www.securityfocus.com/bid/5715
CVE: CVE-2002-1151
Published: 2002-10-11
Description: The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000525; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5395&w=2
CVE: CVE-2002-1152
Published: 2002-10-11
Description: Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5044&w=2; http://www.iss.net/security_center/static/10083.php; http://www.kde.org/info/security/advisory-20020908-1.txt
CVE: CVE-2002-1153
Published: 2002-10-11
Description: IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3950&w=2; http://www.iss.net/security_center/static/10140.php
CVE: CVE-2002-1154
Published: 2002-10-11
Description: anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.
CVSS Score: 5.0 (MEDIUM)
References: http://www.analog.cx/security5.html; http://www.iss.net/security_center/static/10344.php; http://www.osvdb.org/3779
CVE: CVE-2002-1156
Published: 2002-10-11
Description: Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled.
CVSS Score: 5.0 (MEDIUM)
References: http://online.securityfocus.com/advisories/4617; http://www.apache.org/dist/httpd/CHANGES_2.0; http://www.apacheweek.com/issues/02-10-04
CVE: CVE-2002-1165
Published: 2002-10-11
Description: Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-023.txt.asc; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7274&w=2
CVE: CVE-2002-1166
Published: 2002-10-11
Description: Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0138.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5050&w=2; http://www.iss.net/security_center/static/10223.php
CVE: CVE-2002-1170
Published: 2002-10-11
Description: The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0365&w=2; http://sourceforge.net/forum/forum.php?forum_id=216532; http://www.idefense.com/advisory/10.02.02.txt
CVE: CVE-2002-1174
Published: 2002-10-11
Description: Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readheaders function, or (2) via long Received: headers, which are not properly parsed by the parse_received function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5187&w=2; http://rhn.redhat.com/errata/RHSA-2002-215.html
CVE: CVE-2002-1175
Published: 2002-10-11
Description: The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5187&w=2; http://rhn.redhat.com/errata/RHSA-2002-215.html
CVE: CVE-2002-1178
Published: 2002-10-11
Description: Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.
CVSS Score: 5.0 (MEDIUM)
References: http://groups.yahoo.com/group/jetty-announce/message/45; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3039&w=2; http://www.iss.net/security_center/static/10246.php
CVE: CVE-2002-1189
Published: 2002-10-11
Description: The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.
CVSS Score: 4.6 (MEDIUM)
References: http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml; http://www.iss.net/security_center/static/10282.php; http://www.securityfocus.com/bid/5896
CVE: CVE-2002-1618
Published: 2002-10-16
Description: JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
CVSS Score: 7.2 (HIGH)
References: http://www.kb.cert.org/vuls/id/248337; http://www.securityfocus.com/advisories/4569; http://www.securityfocus.com/bid/5979
CVE: CVE-2001-1451
Published: 2002-10-22
Description: Memory leak in the SNMP LAN Manager (LANMAN) MIB extension for Microsoft Windows 2000 before SP3, when the Print Spooler is not running, allows remote attackers to cause a denial of service (memory consumption) via a large number of GET or GETNEXT requests.
CVSS Score: 5.0 (MEDIUM)
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B296815; http://www.kb.cert.org/vuls/id/887393; http://www.securityfocus.com/bid/6030
CVE: CVE-2002-1589
Published: 2002-10-24
Description: Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags kernel parameter, allows local users to cause a denial of service (system panic).
CVSS Score: 2.1 (LOW)
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-48067-1; http://www.securityfocus.com/bid/6080; https://exchange.xforce.ibmcloud.com/vulnerabilities/10496
CVE: CVE-2002-0836
Published: 2002-10-28
Description: dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000537; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0838&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5582&w=2
CVE: CVE-2002-0990
Published: 2002-10-28
Description: The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3124&w=2; http://securityresponse.symantec.com/avcenter/security/Content/2002.10.11.html; http://www.iss.net/security_center/static/10364.php
CVE: CVE-2002-1118
Published: 2002-10-28
Description: TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0017.html; http://otn.oracle.com/deploy/security/pdf/2002alert42rev1.pdf; http://www.iss.net/security_center/static/10283.php
CVE: CVE-2002-1145
Published: 2002-10-28
Description: The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSDE) 2000 can be executed by PUBLIC, which allows an attacker to gain privileges by updating a webtask that is owned by the database owner through the msdb.dbo.mswebtasks table, which does not have strong permissions.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2900&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]3404&w=2; http://www.cisco.com/warp/public/707/cisco-sa-20030126-ms02-061.shtml
CVE: CVE-2002-1179
Published: 2002-10-28
Description: Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5661&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]2920&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]3297&w=2
CVE: CVE-2002-1190
Published: 2002-10-28
Description: Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.
CVSS Score: 7.5 (HIGH)
References: http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml; http://www.iss.net/security_center/static/10282.php; https://exchange.xforce.ibmcloud.com/vulnerabilities/44545
CVE: CVE-2002-1191
Published: 2002-10-28
Description: The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3106&w=2; http://www.idefense.com/advisory/10.16.02.txt; http://www.idefense.com/intelligence/vulnerabilities/display.php?id=48
CVE: CVE-2002-1192
Published: 2002-10-28
Description: Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-021.txt.asc; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0529&w=2; http://secunia.com/advisories/7181
CVE: CVE-2002-1193
Published: 2002-10-28
Description: tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files.
CVSS Score: 2.1 (LOW)
References: http://www.debian.org/security/2002/dsa-172; http://www.iss.net/security_center/static/10307.php; http://www.securityfocus.com/bid/5911
CVE: CVE-2002-1194
Published: 2002-10-28
Description: Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-019.txt.asc; http://www.iss.net/security_center/static/10303.php; http://www.securityfocus.com/bid/5910
CVE: CVE-2002-1195
Published: 2002-10-28
Description: Cross-site scripting vulnerability (XSS) in the PHP interface for ht://Check 1.1 allows remote web servers to insert arbitrary HTML, including script, via a web page.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5160&w=2; http://www.debian.org/security/2002/dsa-169; http://www.iss.net/security_center/static/10089.php
CVE: CVE-2002-1196
Published: 2002-10-28
Description: editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set multiple bits.
CVSS Score: 7.5 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=167485#c12; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6566&w=2; http://www.debian.org/security/2002/dsa-173
CVE: CVE-2002-1197
Published: 2002-10-28
Description: bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail.
CVSS Score: 7.5 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=163024; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6566&w=2; http://www.iss.net/security_center/static/10234.php
CVE: CVE-2002-1198
Published: 2002-10-28
Description: Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack.
CVSS Score: 7.5 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=165221; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6566&w=2; http://www.iss.net/security_center/static/10235.php
CVE: CVE-2002-1199
Published: 2002-10-28
Description: The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5029&w=2; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903
CVE: CVE-2002-1200
Published: 2002-10-28
Description: Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000547; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1928&w=2; http://www.balabit.hu/static/zsa/ZSA-2002-014-en.txt
CVE: CVE-2002-1201
Published: 2002-10-28
Description: IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8599&w=2; http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en; http://www.iss.net/security_center/static/10326.php
CVE: CVE-2002-1202
Published: 2002-10-28
Description: Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/tru64/2002-q4/0002.html; http://www.iss.net/security_center/static/10316.php; http://www.securityfocus.com/bid/5913
CVE: CVE-2002-1203
Published: 2002-10-28
Description: IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3398&w=2; http://www.iss.net/security_center/static/10249.php; http://www.securityfocus.com/bid/5924