rainbutterfly/cve_corpus huggingface dataset:
CVE-2002-2233 
Directory traversal vulnerability in Enceladus Server Suite 3.9 allows remote attackers to list arbitrary directories and possibly cause a denial of service via "@" (at) characters in a CD (CWD) command, such as (1) "@/....\", (2) "@@@/..c:\", or (3) "@/..@/..".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2234 
NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2235 
member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2236 
Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2237 
tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2238 
Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a "..\" (dot dot backslash) in a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2239 
The Cisco Optical Service Module (OSM) for the Catalyst 6500 and 7600 series running Cisco IOS 12.1(8)E through 12.1(13.4)E allows remote attackers to cause a denial of service (hang) via a malformed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2240 
Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2241 
Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2242 
The Apple Package Manager in KisMAC 0.02a and earlier modifies file permissions of sensitive files after installation, which could allow attackers to conduct unauthorized activities on those files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2243 
Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service (refused connections) by opening a connection and not closing it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2244 
Akfingerd 0.5 and earlier versions allow local users to cause a denial of service (crash) via a .plan with a symlink to /dev/urandom or other device, then disconnecting while data is being transferred, which causes a SIGPIPE error that Akfingerd cannot handle.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2245 
ftpd in NetBSD 1.5 through 1.5.3 and 1.6 does not properly quote a digit in response to a STAT command for a filename that contains a carriage return followed by a digit, which can cause firewalls and other intermediary devices to lose proper track of the FTP session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2246 
Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2247 
The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2248 
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2249 
PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2250 
Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2251 
Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to execute arbitrary code via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2252 
SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2253 
Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2254 
The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2255 
Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2256 
Directory traversal vulnerability in pWins Webserver 0.2.5 and earlier allows remote attackers to read arbitrary files via Unicode characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2257 
Stack-based buffer overflow in the parse_field function in cgi_lib.c for LIBCGI 1.0.2 and 1.0.3 allows remote attackers to execute arbitrary code via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2258 
Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large integer or (2) non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2259 
Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2260 
Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2261 
Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2262 
Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2263 
The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2264 
Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors.  NOTE: this might be the same issue as CVE-2002-2185, but there are insufficient details to be certain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2265 
Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G and 4.0F allows remote attackers to gain access to arbitrary files or gain privileges via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2266 
NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service (firewall session table consumption) by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2267 
bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2268 
Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2269 
Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2270 
Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisible data" via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2271 
Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection (DCC) option is used, allows remote attackers to cause a denial of service (crash) via a long string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2272 
Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2273 
Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2274 
akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2275 
Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2276 
Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2277 
SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2278 
Cross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the (1) $App_Theme, (2) $Rub_Search, (3) $Rub_News, (4) $Rub_File, (5) $Rub_Liens, or (6) $Rub_Faq variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2279 
Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2280 
syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2281 
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2282 
McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2283 
Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the "show processes from all users" privilege when the user is removed from the administrator group, which allows that user to view processes of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2284 
Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2285 
eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2286 
The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service (crash) via an empty HTTP request, which causes a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2287 
PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2288 
Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2289 
soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2290 
Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2291 
Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request, possibly triggering a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2292 
Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request to port 9095.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2293 
Webshots Desktop screensaver allows local users to bypass the password on the screensaver by pressing CTRL-ALT-DELETE and (1) hitting the cancel button or (2) killing the screensaver from the task manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2294 
Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service (service termination) via (1) malformed RealAudio (rad) packets that are not properly handled by the RealAudio Proxy, or (2) crafted packets to the statistics service (statsd).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2295 
Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2296 
Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attackers to inject arbitrary web script or HTML via the num parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2297 
PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2298 
PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2299 
PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2300 
Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2301 
Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2302 
3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2303 
3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2304 
SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2305 
SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T10:00:00.000Z
CVE-2002-2306 
Sharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service (CPU consumption) by sending several large messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-19T10:00:00.000Z