rainbutterfly/cve_corpus huggingface dataset:
CVE-2002-0874 
Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-20T04:00:00.000Z
CVE-2002-0875 
Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0876 
Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0877 
Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0878 
SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0879 
showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0880 
Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demonstrated by (1) "jolt", (2) "jolt2", (3) "raped", (4) "hping2", (5) "bloop", (6) "bubonic", (7) "mutant", (8) "trash", and (9) "trash2."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0881 
Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0882 
The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0883 
Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0884 
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0885 
Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0886 
Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0887 
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0888 
3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0889 
Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0891 
The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0892 
The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0893 
Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0894 
NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0895 
Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2004-09-01T04:00:00.000Z
CVE-2002-0896 
The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0897 
LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0898 
Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0899 
Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0900 
Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0901 
Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0902 
Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0903 
register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack on the new user ID and the code value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0904 
SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0905 
Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0906 
Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0907 
Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0908 
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0909 
Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments (2) -f, (3) -n, (4) -D, (5) -M, or (6) -P, or via long environment variables (7) JNAMES or (8) MAILSERVER.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0910 
Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0911 
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0912 
in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0913 
Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0914 
Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0915 
autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0916 
Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0917 
CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0918 
CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the information via a "remove" option in the command parameter, which generates an error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0919 
CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0920 
CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users (and possibly remote attackers) to gain privileges by stealing the file before it has been processed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0921 
CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0922 
CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0923 
CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0924 
CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0925 
Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0926 
Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0928 
Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0929 
Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0930 
Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0931 
Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the "id" parameter to the index.php script with the (3) tickettime, (4) ticketfiles, or (5) updateticketlog operations, or (6) via the update section when a ticket is edited.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0932 
SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0933 
Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0934 
Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0935 
Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0936 
The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0937 
The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0938 
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0939 
The Install Wizard for nCipher MSCAPI CSP 5.50 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Card Set, which results in a lower protection level than specified by the user (module protection only).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0940 
domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Card Set, which results in a lower protection level than specified by the user (module protection only).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0941 
The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2003-04-02T05:00:00.000Z
CVE-2002-0942 
Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartProf, (2) xp_logattach_setport, or (3) xp_logattach.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0943 
MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via a direct request for metacart.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z
CVE-2002-0944 
Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which are not filtered by the stats program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2002-08-31T04:00:00.000Z