rainbutterfly/cve_corpus huggingface dataset:
CVE-2002-2159 
Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2161 
Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU consumption) via a SYN packet flood.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2162 
Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2163 
KvPoll 1.1 allows remote authenticated users to vote more than once by setting the "already_voted" cookie by various methods, including a direct call to clear_cookies.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2164 
Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HREF> link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2165 
The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2166 
Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary HTML and web script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2167 
Directory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences terminated by a null character in the $designNo variable, which is part of an "include" function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2168 
SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including function_describe_item1.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2169 
Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV="refresh" tag to an aim: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2170 
Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2171 
Cross-site scripting (XSS) vulnerability in acWEB 1.8 and 1.14 allows remote attackers to insert arbitrary HTML and web script via a URL, possibly via a "%db" request in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2172 
Informed (1) Designer and (2) Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2173 
Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2174 
The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, which allows remote attackers to create a denial of service (memory consumption) via a large number of connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2175 
phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2176 
SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the User Profile page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2177 
BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2178 
Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2179 
The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service (crash) via a TCP port scan using a tool such as nmap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2180 
The setitimer(2) system call in OpenBSD 2.0 through 3.1 does not properly check certain arguments, which allows local users to write to kernel memory and possibly gain root privileges, possibly via an integer signedness error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2181 
SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2182 
Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code via a long MSN packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2183 
phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2184 
Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a "Showip" parameter in the chat applet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2185 
The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address instead of the Multicast group address, which causes the target to stop sending reports to the router and effectively disconnect the group from the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2186 
Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2187 
Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2188 
OpenBSD before 3.2 allows local users to cause a denial of service (kernel crash) via a call to getrlimit(2) with invalid arguments, possibly due to an integer signedness error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2189 
Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2190 
ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2191 
Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2192 
Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query string in a "dir" request to indexed folders.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2193 
Cross-site scripting (XSS) vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web script via the email parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2195 
Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2196 
Samba before 2.2.5 does not properly terminate the enum_csc_policy data structure, which may allow remote attackers to execute arbitrary code via a buffer overflow attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2197 
Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2198 
Buffer overflow in ZMailer before 2.99.51_1 allows remote attackers to execute arbitrary code during HELO processing from an IPv6 address, possibly using an address that resolves to a long hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2199 
The default aide.conf file in Advanced Intrusion Detection Environment (AIDE) before 0.7_1 on FreeBSD before 2002-08-28 does not properly check subdirectories, which could allow local users to bypass detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2200 
Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2201 
The Printer Administration module for Webmin 0.990 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the printer name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2202 
Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2203 
Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2204 
The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicious package comes from a trusted source.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2205 
Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2206 
The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long username with multiple /localhost entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2207 
Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-11-16T21:17:00.000Z
CVE-2002-2208 
Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-12-21T01:00:00.000Z
CVE-2002-2209 
Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T11:00:00.000Z
CVE-2002-2210 
The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-04T19:00:00.000Z
CVE-2002-2211 
BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-23T16:00:00.000Z
CVE-2002-2212 
The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-23T16:00:00.000Z
CVE-2002-2213 
The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-23T16:00:00.000Z
CVE-2002-2214 
The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long "To" header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-14T22:00:00.000Z
CVE-2002-2215 
The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of "To" addresses, which triggers an error in the rfc822_write_address function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-14T22:00:00.000Z
CVE-2002-2216 
Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtain unspecified sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T23:00:00.000Z
CVE-2002-2217 
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) l parameter to customize.php or the (2) pg parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-11T16:00:00.000Z
CVE-2002-2218 
CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-13T22:00:00.000Z
CVE-2002-2219 
chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user (userid) field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-21T19:00:00.000Z
CVE-2002-2220 
Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-21T19:00:00.000Z
CVE-2002-2221 
Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary.  NOTE: this issue might overlap CVE-2006-6639.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-21T19:00:00.000Z
CVE-2002-2222 
isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (crash) by sending Internet Key Exchange (IKE) payloads out of sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-27T02:00:00.000Z
CVE-2002-2223 
Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-27T02:00:00.000Z
CVE-2002-2224 
Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-27T02:00:00.000Z
CVE-2002-2225 
SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflows using (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-27T02:00:00.000Z
CVE-2002-2226 
Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-23T23:00:00.000Z
CVE-2002-2227 
Buffer underflow in ssldump 0.9b2 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted SSLv2 challenge value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-09-26T00:00:00.000Z
CVE-2002-2228 
MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate character encodings that cannot be processed by MailScanner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2229 
Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2230 
Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a ".gif" or ".jpg" string, a variant of CVE-2002-0328.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2231 
Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL in a photo URL or (2) an X-Forwarded-For: header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z
CVE-2002-2232 
Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T20:00:00.000Z