morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1199.

assistant: The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1200.

assistant: Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1201.

assistant: IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1202.

assistant: Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1203.

assistant: IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1204.

assistant: Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the user_pref() function and accessing the prefs.js file, which is stored in a directory with a predictable name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1209.

assistant: Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1210.

assistant: Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment with malicious script into a frame, which then executes the script in the local browser context.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1211.

assistant: Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE that points to code stored on a remote server, which is then used in (1) index.php, (2) install.php, or (3) various test_*.php scripts.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1212.

assistant: Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1213.

assistant: Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." (dot-dot) sequences containing URL-encoded forward slash ("%2F") characters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1214.

assistant: Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1215.

assistant: Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1216.

assistant: GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1217.

assistant: Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1219.

assistant: Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1220.

assistant: BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1221.

assistant: BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1222.

assistant: Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1223.

assistant: Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps (PostScript) input file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1224.

assistant: Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1225.

assistant: Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1226.

assistant: Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows (CVE-2002-1225).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1227.

assistant: PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1228.

assistant: Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1229.

assistant: Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1230.

assistant: NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1231.

assistant: SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1232.

assistant: Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1233.

assistant: A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1235.

assistant: The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1236.

assistant: The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a denial of service (crash) via an HTTP request to Gozila.cgi without any arguments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1238.

assistant: Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1239.

assistant: QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1242.

assistant: SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain privileges via the "bio" argument to modules.php.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1244.

assistant: Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format strings in the USER command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1245.

assistant: Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1247.

assistant: Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1248.

assistant: Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service (crash) via a GET request for a "%" URI.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1250.

assistant: Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argument.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1251.

assistant: Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1252.

assistant: The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1253.

assistant: Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute commands or modify files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1254.

assistant: Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1255.

assistant: Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1256.

assistant: The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1257.

assistant: Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1258.

assistant: Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1260.

assistant: The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1262.

assistant: Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1264.

assistant: Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1265.

assistant: The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1266.

assistant: Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1267.

assistant: Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1268.

assistant: Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1269.

assistant: Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1270.

assistant: Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1271.

assistant: The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1272.

assistant: Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1275.

assistant: Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1276.

assistant: An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1277.

assistant: Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1278.

assistant: The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1279.

assistant: Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file (-C option).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1280.

assistant: Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1281.

assistant: Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1282.

assistant: Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1283.

assistant: Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name (DN) attribute.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1284.

assistant: The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1285.

assistant: runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1286.

assistant: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the security context of the site that is being visited by the user.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1287.

assistant: Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1288.

assistant: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet Explorer process via the getAbsolutePath() method in a File() call.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1289.

assistant: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service (crash), and possibly execute arbitrary code via the getNativeServices function, which creates an instance of the com.ms.awt.peer.INativeServices (INativeServices) class, whose methods do not verify the memory addresses that are passed as parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1290.

assistant: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the (1) ClipBoardGetText and (2) ClipBoardSetText methods of the INativeServices class.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1291.

assistant: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" (null character) URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1292.

assistant: The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.ms.security.StandardSecurityManager) and bypass intended StandardSecurityManager restrictions by modifying the (1) deniedDefinitionPackages or (2) deniedAccessPackages settings, causing a denial of service by adding Java applets to the list of applets that are prevented from running.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1293.

assistant: The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1294.

assistant: The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows remote attackers to cause a denial of service (crash due to illegal memory accesses) and possibly conduct other unauthorized activities via an applet that uses those references to access proprietary Microsoft methods.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1295.

assistant: The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka "Incomplete Java Object Instantiation Vulnerability."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1296.

assistant: Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1306.

assistant: Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and (2) remote attackers to execute arbitrary code via a certain "lan://" URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1307.

assistant: Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1308.

assistant: Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1309.

assistant: Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1310.

assistant: Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1311.

assistant: Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1312.

assistant: Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable/DSL routers with firmware before 1.43.3 with remote management enabled allows remote attackers to cause a denial of service (router crash) via a long password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1313.

assistant: nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which generates an error that causes nullmailer to stop sending mail to all users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1315.

assistant: Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1316.

assistant: importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1317.

assistant: Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1318.

assistant: Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1319.

assistant: The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1320.

assistant: Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of quotation marks (").
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1321.

assistant: Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain "Now Playing" options on a downloaded file with a long filename.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1322.

assistant: Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g. via nmap.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1323.

assistant: Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1325.

assistant: Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1327.

assistant: Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a corrupt custom attribute, aka "Unchecked Buffer in Windows Shell Could Enable System Compromise."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1334.

assistant: Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1335.

assistant: Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1336.

assistant: TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1337.

assistant: Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1338.

assistant: The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1339.

assistant: The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1340.

assistant: The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1341.

assistant: Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1342.

assistant: Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1344.

assistant: Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1345.

assistant: Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1347.

assistant: Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1348.

assistant: w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1349.

assistant: Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 (POP3).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1350.

assistant: The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1351.

assistant: Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretData function, as demonstrated via a long Nick (nickname) request.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1352.

assistant: Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1353.

assistant: LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1354.

assistant: Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dot dot dot) in the cd/CWD command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1355.

assistant: Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1356.

assistant: Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1357.

assistant: Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1358.

assistant: Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1359.

assistant: Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1360.

assistant: Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1361.

assistant: overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1362.

assistant: mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator character.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1363.

assistant: Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1364.

assistant: Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1365.

assistant: Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1366.

assistant: Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1367.

assistant: Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1368.

assistant: Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1369.

assistant: jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1371.

assistant: filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1372.

assistant: Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1373.

assistant: Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1374.

assistant: The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1375.

assistant: The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1376.

assistant: libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.