rainbutterfly/cve_corpus huggingface dataset:
CVE-2002-2307 
The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary services by connecting from source port 20.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2308 
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2309 
php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2310 
ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2311 
Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage.  NOTE: it was reported that the vendor has disputed the severity of this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2312 
Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2313 
Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary programs via an HTML email message containing a META refresh tag that references an embedded .mhtml file with ActiveX controls that execute a second embedded program, which is processed by Internet Explorer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2314 
Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2315 
Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2316 
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2317 
Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2318 
Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2319 
Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) LOGIN, (2) DATA, and (3) MESS parameters, which are inserted into news.php3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2320 
MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2321 
Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2322 
Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2323 
Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2324 
The "System Restore" directory and subdirectories, and possibly other subdirectories in the "System Volume Information" directory on Windows XP Professional, have insecure access control list (ACL) permissions, which allows local users to access restricted files and modify registry settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2325 
The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service (client crash) via a MIME-encoded email with Content-Type header containing an empty boundary field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2326 
The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2327 
Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880 allows local users to cause a denial of service by setting volatile properties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2328 
Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service (hang) via an LDAP client that sets the page length to zero during a large request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2329 
ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a message with a large number of emoticons.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2330 
Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2331 
W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2332 
Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2333 
Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2334 
Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2335 
Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-26T19:00:00.000Z
CVE-2002-2336 
Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2337 
Kaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2338 
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2339 
Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in (1) image, (2) img, (3) image=right, (4) img=right, (5) image=left, and (6) img=left tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2340 
Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2341 
Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2342 
Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct request for the files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2343 
Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web script or HTML via email messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2344 
Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2345 
Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows remote attackers to gain access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2346 
phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2347 
Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuser.jsp and (3) usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2348 
Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2349 
phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2350 
Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2351 
Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2352 
The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2353 
tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2354 
Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service (crash or hang) via a large number of TCP connection requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2355 
Netgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration information, stores DDNS (DynDNS) user name and password, MAC address filtering table and possibly other information in cleartext, which could allow local users to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2356 
HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2357 
MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string, possibly due to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2358 
Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2359 
Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2360 
The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2361 
The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2362 
Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2363 
VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2364 
Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-29T19:00:00.000Z
CVE-2002-2365 
Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the "|" (pipe) character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2366 
Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2367 
Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2368 
Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2369 
Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2370 
SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request that does not end with a newline.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2371 
Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containing the device's hardware address as the source MAC address in the DLC header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2372 
The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial of service (crash) via a long username, possibly due to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2373 
The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which allows remote attackers to gain access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2374 
Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2375 
Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL.  NOTE: it is not clear whether this issue reveals any more information regarding directory structure than is already available to any CommuniGate Pro user, although there is a possibility that it could be used to infer product version information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2376 
Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name, (2) email, (3) homepage, and (4) location parameters.  NOTE: this issue might overlap CVE-2005-1605.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2377 
Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2378 
Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in the query string, which is inserted into the resulting error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2379 
Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an ssh bug. NOTE: this issue could not be reproduced by the vendor
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z