rainbutterfly/cve_corpus huggingface dataset:
CVE-2002-0729 
Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2002-0730 
Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0731 
Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0732 
Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0733 
Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0734 
b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configurations, which allows remote attackers to execute arbitrary PHP code via a URL that sets the $b2inc variable to point to a malicious program stored on a remote server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0735 
Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0736 
Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0737 
Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) via DOS devices, using a URL that ends with a space and a null character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0738 
MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by (1) splitting the SCRIPT tag into smaller pieces, (2) including the script in a SRC argument to an IMG tag, or (3) using "&={script}" syntax.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0739 
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0740 
Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0741 
psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0742 
Buffer overflow in pioout on AIX 4.3.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0743 
mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0744 
namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0745 
Buffer overflow in uucp in AIX 4.3.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0746 
Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0747 
Buffer overflow in lsmcode in AIX 4.3.3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0748 
LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0749 
CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0750 
CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0751 
CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0752 
CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0753 
Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0754 
Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0755 
Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute commands as root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0756 
Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0757 
(1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0758 
ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0759 
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a bzip2 archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0760 
Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0761 
bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0762 
shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0763 
Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0764 
Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0765 
sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0766 
OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0767 
simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0768 
Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0769 
The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0770 
Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated using "say $rcon_password."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0771 
Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0772 
Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0773 
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0774 
Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0775 
browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0776 
getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0777 
Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0778 
The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0779 
FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0780 
IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to ABEND.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0781 
RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0782 
Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0783 
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0784 
Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0785 
AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0786 
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0787 
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0788 
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0789 
Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0790 
clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0791 
Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0792 
The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0793 
Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0794 
The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service (network service availability) via a large number of connection attempts, which fills the queue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0795 
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0796 
Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0797 
Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0798 
Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0799 
Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0800 
BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-07-26T04:00:00.000Z
CVE-2002-0801 
Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0802 
The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z