rainbutterfly/cve_corpus huggingface dataset:
CVE-2002-1564 
Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-05-30T04:00:00.000Z
CVE-2002-1565 
Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-06-05T04:00:00.000Z
CVE-2002-1566 
netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-08-15T04:00:00.000Z
CVE-2002-1567 
Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-09-19T04:00:00.000Z
CVE-2002-1568 
OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-08T04:00:00.000Z
CVE-2002-1569 
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-25T04:00:00.000Z
CVE-2002-1570 
Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-10-30T05:00:00.000Z
CVE-2002-1571 
The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-23T22:00:00.000Z
CVE-2002-1572 
Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-27T22:00:00.000Z
CVE-2002-1573 
Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-01-27T22:00:00.000Z
CVE-2002-1574 
Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2002-1575 
cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-02-11T05:00:00.000Z
CVE-2002-1576 
lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-16T05:00:00.000Z
CVE-2002-1577 
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-16T05:00:00.000Z
CVE-2002-1578 
The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-16T05:00:00.000Z
CVE-2002-1579 
SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-03-16T05:00:00.000Z
CVE-2002-1580 
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-05-20T04:00:00.000Z
CVE-2002-1581 
Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-06T04:00:00.000Z
CVE-2002-1582 
compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-07-06T04:00:00.000Z
CVE-2002-1583 
Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-08-20T04:00:00.000Z
CVE-2002-1584 
Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2002-1585 
Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets that cause some network interfaces to stop responding to TCP traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2002-1586 
Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2002-1587 
The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application that uses libthread by causing the application to wait for a certain mutex.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2002-1588 
Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2002-1589 
Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags kernel parameter, allows local users to cause a denial of service (system panic).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2002-1590 
The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-02-08T05:00:00.000Z
CVE-2002-1591 
AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1592 
The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1593 
mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1594 
Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1595 
Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1596 
Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with large headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1597 
Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragmented packet to the Gigabit interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1598 
Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to (1) mlclear or (2) mllock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1599 
DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1600 
Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-13T05:00:00.000Z
CVE-2002-1601 
The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-20T05:00:00.000Z
CVE-2002-1602 
Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1603 
GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1604 
Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1605 
Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1606 
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1607 
Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1608 
Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1609 
Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1610 
Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1611 
Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1612 
Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1613 
Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1614 
Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1615 
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1616 
Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1617 
Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1618 
JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-25T05:00:00.000Z
CVE-2002-1619 
Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1620 
Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1621 
Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1622 
Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1623 
The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by (1) monitoring responses before the password is supplied or (2) sniffing, as originally reported for FireWall-1 SecuRemote.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1624 
Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1625 
Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1626 
Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1627 
Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the quiz parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1628 
Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the type parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1629 
Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1630 
The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1631 
SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1632 
Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1633 
Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-26T05:00:00.000Z
CVE-2002-1634 
Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-28T05:00:00.000Z
CVE-2002-1635 
The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-28T05:00:00.000Z
CVE-2002-1636 
Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-28T05:00:00.000Z
CVE-2002-1637 
Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-03-28T05:00:00.000Z