rainbutterfly/cve_corpus huggingface dataset:
CVE-2002-1860 
Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1861 
Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1862 
SmartMail Server 2.0 allows remote attackers to cause a denial of service (crash) by sending data and closing the connection before all the data has been sent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1863 
Iomega Network Attached Storage (NAS) A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1864 
Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1865 
Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through 1.42.7 and Linksys WAP11 1.3 and 1.4, allows remote attackers to cause a denial of service (crash) via a long header, as demonstrated using the Host header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1866 
Simple Web Server (SWS) 0.0.4 through 0.1.0 does not close file descriptors for 404 error messages, which could allow remote attackers to cause a denial of service (file descriptor exhaustion) via multiple requests for pages that do not exist.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1867 
The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1) admin/setup.cgi, which allows remote attackers to create an administrative account, or (2) admin/nph-build.cgi, which allows remote attackers to cause a denial of service (CPU consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1868 
Dispair 0.1 and 0.2 allows remote attackers to execute arbitrary shell commands via certain form fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1869 
Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attackers to prevent events from being recorded by opening the log file using an application such as Microsoft's Event Viewer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1870 
Simple Web Server (SWS) 0.0.4 through 0.1.0 does not properly handle when the recv function call fails, which may allow remote attackers to overwrite program data or perform actions on an uninitialized heap, leading to a denial of service and possibly code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1871 
pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1872 
Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1873 
Microsoft Exchange 2000, when used with Microsoft Remote Procedure Call (MSRPC), allows remote attackers to cause a denial of service (crash or memory consumption) via malformed MSRPC calls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1874 
astrocam.cgi in AstroCam 0.9-1-1 through 1.4.0 allows remote attackers to execute arbitrary commands via shell metacharacters in an HTTP request.  NOTE: earlier disclosures stated that the affected versions were 1.7.1 through 2.1.2, but the vendor explicitly stated that these were incorrect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1875 
Entercept Agent 2.5 agent for Windows, released before May 21, 2002, allows local administrative users to obtain the entercept agent password, which could allow the administrators to log on as the entercept_agent account and conceal their identity.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1876 
Microsoft Exchange 2000 allows remote authenticated attackers to cause a denial of service via a large number of rapid requests, which consumes all of the licenses that are granted to Exchange by IIS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1877 
NETGEAR FM114P allows remote attackers to bypass access restrictions for web sites via a URL that uses the IP address instead of the hostname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1878 
PHP remote file inclusion vulnerability in w-Agora 4.1.3 allows remote attackers to execute arbitrary PHP code via the inc_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1879 
SQL injection vulnerability in LokwaBB 1.2.2 allows remote attackers to execute arbitrary SQL commands via the (1) member parameter to member.php or (2) loser parameter to misc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1880 
LokwaBB 1.2.2 allows remote attackers to read arbitrary messages by modifying the pmid parameter to pm.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1881 
Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service (web browser crash) via malformed content in a Flash Shockwave (.SWF) file, as demonstrated by by ROT13 encoding the body of the file but not the headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1882 
Unknown vulnerability in AolSecurityPrivate.class in Oracle E-Business Suite 11i 11.1 through 11.6 allows remote attackers to bypass user authentication checks via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1883 
Trolltech Qt Assistant 1.0 in Trolltech Qt 3.0.3, when loaded from the Designer, opens port 7358 for interprocess communication, which allows remote attackers to open arbitrary HTML pages and cause a denial of service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1884 
index.php in Py-Membres 3.1 allows remote attackers to log in as an administrator by setting the pymembs parameter to "admin".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1885 
PHP remote file inclusion vulnerability in showhits.php3 for PowerPhlogger (PPhlogger) 2.0.9 through 2.2.2 allows remote attackers to execute arbitrary PHP code via the rel_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1886 
TightAuction 3.0 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain the database username and password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1887 
PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1888 
CommonName Toolbar 3.5.2.0 sends unqualified domain name requests to the CommonName organization and possibly other web servers for name resolution, which allows those organizations to obtain internal server names.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1889 
Off-by-one buffer overflow in the context_action function in context.c of Logsurfer 1.41 through 1.5a allows remote attackers to cause a denial of service (crash) via a malformed log entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1890 
rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1891 
Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1892 
NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1893 
Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1894 
Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1895 
The servlet engine in Jakarta Apache Tomcat 3.3 and 4.0.4, when using IIS and the ajp1.3 connector, allows remote attackers to cause a denial of service (crash) via a large number of HTTP GET requests for an MS-DOS device such as AUX, LPT1, CON, or PRN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1896 
Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) -o command line argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1897 
MyWebServer LLC MyWebServer 1.0.2 allows remote attackers to cause a denial of service (crash) via a long HTTP request, possibly triggering a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1898 
Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1899 
Cross-site scripting (XSS) vulnerability in IceWarp Web Mail 3.3.3 and 3.4.5 allows remote attackers to inject arbitrary web script or HTML via the "Full Name" (addressname) parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1900 
Cross-site scripting (XSS) vulnerability in Pinboard 1.0 allows remote attackers to inject arbitrary web script or HTML via tasklists.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1901 
Cross-site scripting (XSS) vulnerability in Bodo Bauer BBGallery 1.0 allows remote attackers to inject arbitrary web script or HTML via image tags.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1902 
CGIForum 1.0 through 1.05 allows remote attackers to cause a denial of service (infinite recursion) by creating a message board post that is a child of an outdated parent.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1903 
Pine 4.2.1 through 4.4.4 puts Unix usernames and/or uid into Sender: and X-Sender: headers, which could allow remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1904 
Buffer overflow in the Log function in util.c in GazTek ghttpd 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1905 
Buffer overflow in the web server of Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1906 
The web server for Polycom ViaVideo 2.2 and 3.0 allows remote attackers to cause a denial of service (CPU consumption) by sending incomplete HTTP requests and leaving the connections open.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1907 
TelCondex SimpleWebServer 2.06.20817 allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1908 
Microsoft IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with a Host header that contains a large number of "/" (forward slash) characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1909 
Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1910 
Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1911 
ZoneAlarm Pro 3.0 and 3.1, when configured to block all traffic, allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of SYN packets (SYN flood).  NOTE: the vendor was not able to reproduce the issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1912 
SkyStream EMR5000 1.16 through 1.18 does not drop packets or disable the Ethernet interface when the buffers are full, which allows remote attackers to cause a denial of service (null pointer exception and kernel panic) via a large number of packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1913 
phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1914 
dump 0.4 b10 through b29 allows local users to cause a denial of service (execution prevention) by using flock() to lock the /etc/dumpdates file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1915 
tip on multiple BSD-based operating systems allows local users to cause a denial of service (execution prevention) by using flock() to lock the /var/log/acculog file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1916 
Pirch and RusPirch, when auto-log is enabled, allows remote attackers to cause a denial of service (crash) via a nickname containing an MS-DOS device name such as AUX, which is inserted into a filename for saving queries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1917 
CRLF injection vulnerability in the "User Profile: Send Email" feature in Geeklog 1.35 and 1.3.5sr1 allows remote attackers to obtain e-mail addresses by injecting a CRLF into the Subject field and adding a BCC mail header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1918 
Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors.  NOTE: due to the lack of details available regarding this issue, perhaps it should be REJECTED.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1919 
SQL injection vulnerability in shopadmin.asp in VP-ASP 4.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1920 
Buffer overflow in FtpXQ 2.5 allows remote attackers to cause a denial of service (crash) via a MKD command with a long directory name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1921 
The default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the bind address to the loopback interface, which allows remote attackers to connect to the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1922 
Cross-site scripting (XSS) vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1923 
The default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not have logging enabled, which could allow remote attackers to conduct activities without detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1924 
PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1925 
Tiny Personal Firewall 3.0 through 3.0.6 allows remote attackers to cause a denial of service (crash) by via SYN, UDP, ICMP and TCP portscans when the administrator selects the Log tab of the Personal Firewall Agent module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1926 
Directory traversal vulnerability in source.php in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1927 
Aquonics File Manager 1.5 allows users with edit privileges to modify user accounts by editing the userlist.cgi file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1928 
602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1929 
Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (2) email, or (3) download actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1930 
Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1931 
Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1932 
Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the "Do not overwrite events (clear log manually)" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1933 
The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1934 
Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 2.0.1 leaks sensitive information during boot-up, which allows attackers to obtain the MD5 hash of the Admin password, MD5 hash of the physical password, and other registration information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z
CVE-2002-1935 
Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) "To" and "From" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2005-06-28T04:00:00.000Z