morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1583.

assistant: lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1584.

assistant: CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1585.

assistant: SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1586.

assistant: Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ ("%2E%2E%2F%") sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1587.

assistant: NWFTPD.nlm before 5.01w in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via an anonymous STOU command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1593.

assistant: The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2001-1594.

assistant: GE Healthcare eNTEGRA P&R has a password of (1) entegra for the entegra user, (2) passme for the super user of the Polestar/Polestar-i Starlink 4 upgrade, (3) 0 for the entegra user of the Codonics printer FTP service, (4) eNTEGRA for the eNTEGRA P&R user account, (5) insite for the WinVNC Login, and possibly other accounts, which has unspecified impact and attack vectors.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0001.

assistant: Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commands via an improperly terminated comment or phrase in the address list.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0002.

assistant: Format string vulnerability in stunnel before 3.22 when used in client mode for (1) smtp, (2) pop, or (3) nntp allows remote malicious servers to execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0003.

assistant: Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0004.

assistant: Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0005.

assistant: Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0006.

assistant: XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0007.

assistant: CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0008.

assistant: Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0009.

assistant: show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0010.

assistant: Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0011.

assistant: Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0012.

assistant: Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0013.

assistant: Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0014.

assistant: URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0017.

assistant: Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0018.

assistant: In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0020.

assistant: Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0021.

assistant: Network Product Identification (PID) Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service (crash) via a malformed product announcement.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0022.

assistant: Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0023.

assistant: Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0024.

assistant: File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0025.

assistant: Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify which application is used to process a document.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0026.

assistant: Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0027.

assistant: Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in MS:MS01-058/CAN-2001-0874.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0028.

assistant: Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0029.

assistant: Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0030.

assistant: The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0031.

assistant: Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0032.

assistant: Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0033.

assistant: Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0034.

assistant: The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0036.

assistant: Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0037.

assistant: Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0038.

assistant: Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0039.

assistant: rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0040.

assistant: Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0041.

assistant: Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0042.

assistant: Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0043.

assistant: sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0044.

assistant: GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0045.

assistant: slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0046.

assistant: Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0047.

assistant: CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service (crash) via a short malformed packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0048.

assistant: Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0049.

assistant: Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0050.

assistant: Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0051.

assistant: Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0052.

assistant: Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0053.

assistant: Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request.  NOTE: this candidate may be split or merged with other candidates.  This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0054.

assistant: SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0055.

assistant: SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0056.

assistant: Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0057.

assistant: XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0058.

assistant: Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0059.

assistant: The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0060.

assistant: IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0061.

assistant: Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0062.

assistant: Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0063.

assistant: Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0064.

assistant: Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0065.

assistant: Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0066.

assistant: Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0067.

assistant: Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0068.

assistant: Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0069.

assistant: Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0070.

assistant: Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0071.

assistant: Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0072.

assistant: The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0073.

assistant: The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0074.

assistant: Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0075.

assistant: Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0076.

assistant: Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0077.

assistant: Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable Invocation via Object tag" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0078.

assistant: The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0079.

assistant: Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0080.

assistant: rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0081.

assistant: Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0082.

assistant: The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0083.

assistant: Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0084.

assistant: Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0085.

assistant: cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0086.

assistant: Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0087.

assistant: bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0088.

assistant: Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0089.

assistant: Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0090.

assistant: Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0091.

assistant: Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0092.

assistant: CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0093.

assistant: Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0094.

assistant: config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0095.

assistant: The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0096.

assistant: The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0097.

assistant: Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0098.

assistant: Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0099.

assistant: Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0100.

assistant: AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0101.

assistant: Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0102.

assistant: Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0103.

assistant: An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0104.

assistant: AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0105.

assistant: CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0106.

assistant: BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0107.

assistant: Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0108.

assistant: Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0109.

assistant: Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0110.

assistant: Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0111.

assistant: Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0112.

assistant: Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0113.

assistant: EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0114.

assistant: EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0115.

assistant: Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0116.

assistant: Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0117.

assistant: Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0118.

assistant: Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0119.

assistant: Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0120.

assistant: Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0121.

assistant: PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0122.

assistant: Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0123.

assistant: MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0124.

assistant: MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0125.

assistant: Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0126.

assistant: Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0127.

assistant: Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service (hang) via a port scan of the WAN port.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0128.

assistant: cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0129.

assistant: efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0130.

assistant: Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0131.

assistant: ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0132.

assistant: Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0133.

assistant: Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0134.

assistant: Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0135.

assistant: Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0136.

assistant: Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0137.

assistant: CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0138.

assistant: CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0139.

assistant: Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0140.

assistant: Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0141.

assistant: Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0142.

assistant: CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters.