rainbutterfly/cve_corpus huggingface dataset:
CVE-2002-2380 
NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2381 
Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remote attackers to casue a denial of service and possibly execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2382 
cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2383 
SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2384 
hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2385 
Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2386 
Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2387 
Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2388 
Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2389 
TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2390 
Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2391 
SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2392 
Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2393 
Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service (no new connections) via a series of MKD commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-31T16:00:00.000Z
CVE-2002-2394 
InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2395 
InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2396 
Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2397 
Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network address of 127.0.0.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2398 
The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2399 
Directory traversal vulnerability in viewAttachment.cgi in W3Mail 1.0.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2400 
Buffer overflow in the httpdProcessRequest function in LibHTTPD 1.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2401 
NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2402 
SURECOM broadband router EP-4501 uses a default SNMP read community string of "public" and a default SNMP read/write community string of "secret," which allows remote attackers to read and modify router configuration information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2403 
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2404 
Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via a long request to the POP3 port (TCP port 110).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2405 
Check Point FireWall-1 4.1 and Next Generation (NG), with UserAuth configured to proxy HTTP traffic only, allows remote attackers to pass unauthorized HTTPS, FTP and possibly other traffic through the firewall.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2406 
Buffer overflow in HTTP server in LiteServe 2.0, 2.0.1 and 2.0.2 allows remote attackers to cause a denial of service (hang) via a large number of percent characters (%) in an HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2407 
Certain patches for QNX Neutrino realtime operating system (RTOS) 6.2.0 set insecure permissions for the files (1) /sbin/io-audio by OS Update Patch A, (2) /bin/shutdown, (3) /sbin/fs-pkg, and (4) phshutdown by QNX experimental patches, (5) cpim, (6) vpim, (7) phrelaycfg, and (8) columns, (9) othello, (10) peg, (11) solitaire, and (12) vpoker in the games pack 2.0.3, which allows local users to gain privileges by modifying the files before permissions are changed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2408 
Gordano Messaging Server (GMS) Mail 8 (a.k.a. NTMail) only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2409 
Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2410 
openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks and obtain certain configuration and version information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2411 
Buffer overflow in badmin.c in BannerWheel 1.0 allows remote attackers to execute arbitrary code via a long rcmd command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2412 
Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2413 
WebSite Pro 3.1.11.0 on Windows allows remote attackers to read script source code for files with extensions greater than 3 characters via a URL request that uses the equivalent 8.3 file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2414 
Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2415 
Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero (null) bytes sent via UDP to a running service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2416 
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2417 
acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2418 
Cross-site scripting (XSS) vulnerability in acFreeProxy (aka acFP) 1.33 beta 7 allows remote attackers to inject arbitrary web script or HTML via the URL, which is inserted into an error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2419 
Direct connect text client (DCTC) client 0.83.3 allows remote attackers to cause a denial of service (crash) via a string ending with a NULL byte character.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2420 
site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2421 
acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2422 
Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2423 
Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2424 
Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the style attribute of an HTML tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2425 
Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-01T17:00:00.000Z
CVE-2002-2426 
Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T00:00:00.000Z
CVE-2002-2427 
The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via "an extra slash in a URL," a different vulnerability than CVE-2002-1603.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-06T19:00:00.000Z
CVE-2002-2428 
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-06T19:00:00.000Z
CVE-2002-2429 
webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-06T19:00:00.000Z
CVE-2002-2430 
GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-06T19:00:00.000Z
CVE-2002-2431 
Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause "incorrect behavior" via unknown "malicious code," related to incorrect use of the socketInputBuffered function by sockGen.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-06T19:00:00.000Z
CVE-2002-2432 
Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via a crafted username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-05T15:15:00.000Z
CVE-2002-2433 
NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-05T15:15:00.000Z
CVE-2002-2434 
NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via multiple FTP sessions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-04-05T15:15:00.000Z
CVE-2002-2435 
The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-07T19:00:00.000Z
CVE-2002-2436 
The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-07T19:00:00.000Z
CVE-2002-2437 
The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-12-07T19:00:00.000Z
CVE-2002-2438 
TCP firewalls could be circumvented by sending a SYN Packets with other flags (like e.g. RST flag) set, which was not correctly discarded by the Linux TCP stack after firewalling.
Problem types: cwe_id: CWE-287
description: CWE-287
Affected products: vendor: n/a
product: kernel
Published: 2021-05-18T11:36:47.000Z
CVE-2002-2439 
Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.
Problem types: description: Integer Overflow
Affected products: vendor: GNU
product: gcc
Published: 2019-10-23T17:47:38.000Z
CVE-2002-2443 
schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2013-05-29T10:00:00.000Z
CVE-2002-2444 
Snoopy before 2.0.0 has a security hole in exec cURL
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-10-28T13:11:34.000Z
CVE-2002-2445 
GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) "service." for the service user, (3) admin.genie for the admin user, (4) reboot for the reboot user, and (5) shutdown for the shutdown user, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T10:00:00.000Z
CVE-2002-2446 
GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-04T10:00:00.000Z
CVE-2003-0001 
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-01-08T05:00:00.000Z
CVE-2003-0002 
Cross-site scripting vulnerability (XSS) in ManualLogin.asp script for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary script via the REASONTXT parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0003 
Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0004 
Buffer overflow in the Windows Redirector function in Microsoft Windows XP allows local users to execute arbitrary code via a long parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0007 
Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0009 
Cross-site scripting (XSS) vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2003-0010 
Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote attackers to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value that enables a heap-based buffer overflow attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-21T05:00:00.000Z
CVE-2003-0011 
Unknown vulnerability in the DNS intrusion detection application filter for Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (blocked traffic to DNS servers) via a certain type of incoming DNS request that is not properly handled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-03-21T05:00:00.000Z