deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-1254
Published: 2002-12-11
Description: Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1191&w=2; http://security.greymagic.com/adv/gm012-ie/; http://www.ciac.org/ciac/bulletins/n-018.shtml
CVE: CVE-2002-1266
Published: 2002-12-11
Description: Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."
CVSS Score: 4.6 (MEDIUM)
References: http://www.info.apple.com/usen/security/security_updates.html; http://www.osvdb.org/7057; https://exchange.xforce.ibmcloud.com/vulnerabilities/10818
CVE: CVE-2002-1267
Published: 2002-12-11
Description: Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."
CVSS Score: 5.0 (MEDIUM)
References: http://www.info.apple.com/usen/security/security_updates.html; http://www.osvdb.org/7058; https://exchange.xforce.ibmcloud.com/vulnerabilities/10824
CVE: CVE-2002-1268
Published: 2002-12-11
Description: Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."
CVSS Score: 4.6 (MEDIUM)
References: http://www.info.apple.com/usen/security/security_updates.html; http://www.osvdb.org/7059; https://exchange.xforce.ibmcloud.com/vulnerabilities/10828
CVE: CVE-2002-1269
Published: 2002-12-11
Description: Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem.
CVSS Score: 4.6 (MEDIUM)
References: http://www.info.apple.com/usen/security/security_updates.html; http://www.info.apple.com/usen/security/security_updates.html
CVE: CVE-2002-1270
Published: 2002-12-11
Description: Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call.
CVSS Score: 2.1 (LOW)
References: http://www.info.apple.com/usen/security/security_updates.html; http://www.osvdb.org/7060; https://exchange.xforce.ibmcloud.com/vulnerabilities/10829
CVE: CVE-2002-1272
Published: 2002-12-11
Description: Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges.
CVSS Score: 10.0 (HIGH)
References: http://www.cert.org/advisories/CA-2002-32.html; http://www.kb.cert.org/vuls/id/181721; http://www.securityfocus.com/bid/6220
CVE: CVE-2002-1317
Published: 2002-12-11
Description: Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20021202-01-I; http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21541; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7843&w=2
CVE: CVE-2002-1318
Published: 2002-12-11
Description: Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
CVSS Score: 10.0 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20021204-01-I; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000550; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8076&w=2
CVE: CVE-2002-1319
Published: 2002-12-11
Description: The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.
CVSS Score: 2.1 (LOW)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000553; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3587&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9297&w=2
CVE: CVE-2002-1320
Published: 2002-12-11
Description: Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of quotation marks (").
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000551; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0531&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6241&w=2
CVE: CVE-2002-1321
Published: 2002-12-11
Description: Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain "Now Playing" options on a downloaded file with a long filename.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0764&w=2; http://service.real.com/help/faq/security/bufferoverrun_player.html; http://www.securityfocus.com/bid/6227
CVE: CVE-2002-1322
Published: 2002-12-11
Description: Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g. via nmap.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0084.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8238&w=2; http://www.securityfocus.com/bid/6228
CVE: CVE-2002-1323
Published: 2002-12-11
Description: Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-007.0.txt; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.1/SCOSA-2004.1.txt; ftp://patches.sgi.com/support/free/security/advisories/20030606-01-A
CVE: CVE-2002-1334
Published: 2002-12-11
Description: Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5148&w=2; http://securitytracker.com/id?1005681; http://www.securityfocus.com/bid/6265
CVE: CVE-2002-1335
Published: 2002-12-11
Description: Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.
CVSS Score: 4.3 (MEDIUM)
References: http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200211.month/838.html; http://secunia.com/advisories/8015; http://secunia.com/advisories/8016
CVE: CVE-2002-1336
Published: 2002-12-11
Description: TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1524&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3594&w=2
CVE: CVE-2002-1158
Published: 2002-12-18
Description: Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.
CVSS Score: 7.2 (HIGH)
References: http://canna.sourceforge.jp/sec/Canna-2002-01.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6344&w=2; http://www.debian.org/security/2003/dsa-224
CVE: CVE-2002-1159
Published: 2002-12-18
Description: Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.
CVSS Score: 6.4 (MEDIUM)
References: http://canna.sourceforge.jp/sec/Canna-2002-01.txt; http://www.debian.org/security/2003/dsa-224; http://www.redhat.com/support/errata/RHSA-2002-246.html
CVE: CVE-2002-1255
Published: 2002-12-18
Description: Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/6319; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-067; https://exchange.xforce.ibmcloud.com/vulnerabilities/10763
CVE: CVE-2002-1262
Published: 2002-12-18
Description: Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary files.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1857&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4172&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]1672&w=2
CVE: CVE-2002-1338
Published: 2002-12-18
Description: The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1193&w=2; http://security.greymagic.com/adv/gm008-ie/; http://www.kb.cert.org/vuls/id/156123
CVE: CVE-2002-1339
Published: 2002-12-18
Description: The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1193&w=2; http://security.greymagic.com/adv/gm008-ie/; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1193&w=2
CVE: CVE-2002-1340
Published: 2002-12-18
Description: The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1193&w=2; http://security.greymagic.com/adv/gm008-ie/; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1193&w=2
CVE: CVE-2002-1341
Published: 2002-12-18
Description: Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://f0kp.iplus.ru/bz/008.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6484&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3272&w=2
CVE: CVE-2002-1342
Published: 2002-12-18
Description: Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://www.debian.org/security/2002/dsa-203; http://www.iss.net/security_center/static/10768.php; http://www.securityfocus.com/bid/6313
CVE: CVE-2002-1344
Published: 2002-12-18
Description: Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt; http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000552
CVE: CVE-2002-1347
Published: 2002-12-18
Description: Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-131
References: http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html; http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557; http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
CVE: CVE-2002-1349
Published: 2002-12-18
Description: Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 (POP3).
CVSS Score: 4.6 (MEDIUM)
References: http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=12982; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5917&w=2; http://www.kb.cert.org/vuls/id/157961
CVE: CVE-2002-1354
Published: 2002-12-18
Description: Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dot dot dot) in the cd/CWD command.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/7737/; http://securitytracker.com/id?1005832; https://exchange.xforce.ibmcloud.com/vulnerabilities/6165
CVE: CVE-2002-1643
Published: 2002-12-19
Description: Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.
CVSS Score: 7.5 (HIGH)
References: http://www.kb.cert.org/vuls/id/974689; http://www.nextgenss.com/advisories/realhelix.txt; http://www.securityfocus.com/archive/1/304203
CVE: CVE-2002-1161
Published: 2002-12-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1380.  Reason: This candidate is a reservation duplicate of CVE-2002-1380.  Notes: none
CVE: CVE-2002-1256
Published: 2002-12-23
Description: The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/6367; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-070; https://exchange.xforce.ibmcloud.com/vulnerabilities/10843
CVE: CVE-2002-1257
Published: 2002-12-23
Description: Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.
CVSS Score: 10.0 (HIGH)
References: http://www.securityfocus.com/bid/6371; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069; http://www.securityfocus.com/bid/6371
CVE: CVE-2002-1258
Published: 2002-12-23
Description: Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error.
CVSS Score: 5.0 (MEDIUM)
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A582; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
CVE: CVE-2002-1259
Published: 2002-12-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1286.  Reason: This candidate is a reservation duplicate of CVE-2002-1286.  Notes: All CVE users should reference CVE-2002-1286 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2002-1260
Published: 2002-12-23
Description: The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.
CVSS Score: 7.5 (HIGH)
References: http://www.ciac.org/ciac/bulletins/n-026.shtml; http://www.securityfocus.com/bid/6379; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
CVE: CVE-2002-1261
Published: 2002-12-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2002-1292.  Reason: This candidate is a reservation duplicate of CVE-2002-1292.  Notes: All CVE users should reference CVE-2002-1292 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2002-1296
Published: 2002-12-23
Description: Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3173&w=2; http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131; http://www.iss.net/security_center/static/10717.php
CVE: CVE-2002-1325
Published: 2002-12-23
Description: Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/6380; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069; http://www.securityfocus.com/bid/6380
CVE: CVE-2002-1345
Published: 2002-12-23
Description: Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20021205-01-A; http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8940&w=2
CVE: CVE-2002-1350
Published: 2002-12-23
Description: The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-050.0.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3398&w=2; http://www.debian.org/security/2002/dsa-206
CVE: CVE-2002-1355
Published: 2002-12-23
Description: Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.
CVSS Score: 5.0 (MEDIUM)
References: http://www.ethereal.com/appnotes/enpa-sa-00007.html; http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-bgp.c.diff?r1=1.68&r2=1.69; http://www.redhat.com/support/errata/RHSA-2002-290.html
CVE: CVE-2002-1356
Published: 2002-12-23
Description: Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.
CVSS Score: 7.5 (HIGH)
References: http://www.ethereal.com/appnotes/enpa-sa-00007.html; http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13; http://www.redhat.com/support/errata/RHSA-2002-290.html
CVE: CVE-2002-1357
Published: 2002-12-23
Description: Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html; http://securitytracker.com/id?1005812; http://securitytracker.com/id?1005813
CVE: CVE-2002-1358
Published: 2002-12-23
Description: Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html; http://securitytracker.com/id?1005812; http://securitytracker.com/id?1005813
CVE: CVE-2002-1359
Published: 2002-12-23
Description: Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html; http://securitytracker.com/id?1005812; http://securitytracker.com/id?1005813
CVE: CVE-2002-1360
Published: 2002-12-23
Description: Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html; http://securitytracker.com/id?1005812; http://securitytracker.com/id?1005813
CVE: CVE-2002-1361
Published: 2002-12-23
Description: overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2807&w=2; http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377; http://www.cert.org/advisories/CA-2002-35.html
CVE: CVE-2002-1362
Published: 2002-12-23
Description: mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator character.
CVSS Score: 5.0 (MEDIUM)
References: http://www.debian.org/security/2002/dsa-211; http://www.redhat.com/support/errata/RHSA-2003-118.html; http://www.securityfocus.com/bid/6392
CVE: CVE-2002-1364
Published: 2002-12-23
Description: Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0963&w=2; http://www.debian.org/security/2003/dsa-254; http://www.novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html
CVE: CVE-2002-1365
Published: 2002-12-23
Description: Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8638&w=2