yahoo-inc/cve-impacts huggingface dataset:
CVE-2002-0675: Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 does not require administrative privileges to perform a firmware upgrade, which allows unauthorized users to upgrade the phone.
Key phrases: upgrade the phone
CVE-2002-0676: SoftwareUpdate for MacOS 10.1.x does not use authentication when downloading a software update, which could allow remote attackers to execute arbitrary code by posing as the Apple update server via techniques such as DNS spoofing or cache poisoning, and supplying Trojan Horse updates.
Key phrases: execute arbitrary code, execute arbitrary code by posing as the Apple, dns spoofing, cache poisoning
CVE-2002-0677: CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
Key phrases: overwrite arbitrary memory locations, gain privileges, overwrite arbitrary memory locations with a zero
CVE-2002-0678: CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2002-0679: Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
Key phrases: execute arbitrary code, execute arbitrary code via an argument to the, buffer overflow
CVE-2002-0680: Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence.  NOTE: it is highly likely that this candidate will be REJECTED because it has been reported to be a duplicate of CVE-2001-0228.
Key phrases: read arbitrary files, read arbitrary files via a URL with an, directory traversal
CVE-2002-0681: Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" message, which does not quote the script.
Key phrases: execute script as other web users via script, cross-site scripting
CVE-2002-0682: Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet.
Key phrases: execute script as other web users via script, cross-site scripting
CVE-2002-0683: Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.
Key phrases: execute programs on the server via a .., directory traversal
CVE-2002-0684: Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
Key phrases: execute arbitrary code, execute arbitrary code through a subroutine used by, buffer overflow
CVE-2002-0685: Heap-based buffer overflow in the message decoding functionality for PGP Outlook Encryption Plug-In, as used in NAI PGP Desktop Security 7.0.4, Personal Security 7.0.3, and Freeware 7.0.3, allows remote attackers to modify the heap and gain privileges via a large, malformed mail message.
Key phrases: gain privileges, modify the heap and gain privileges via a, heap-based buffer overflow, heap based buffer overflow
CVE-2002-0686: Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a long argument to, buffer overflow
CVE-2002-0687: The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.
Key phrases: shut down the Zope server via certain headers
CVE-2002-0688: ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictions and call arbitrary methods of catalog indexes.
Key phrases: call arbitrary methods, bypass access restrictions, bypass access restrictions and call arbitrary methods of
CVE-2002-0690: Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.
Key phrases: execute arbitrary code, execute arbitrary code via an HTTP GET request, format string
CVE-2002-0691: Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189.
Key phrases: execute scripts in the Local Computer zone via, cross-site scripting in local html resource
CVE-2002-0692: Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to cause a denial of service (CPU consumption) or run arbitrary code, respectively, via a certain type of web file request.
Key phrases: run arbitrary code, denial of service (CPU consumption), cause a denial of service (CPU consumption, buffer overflow, web file request
CVE-2002-0693: Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function.
Key phrases: execute code via (1) a long, buffer overflow
CVE-2002-0694: The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to execute arbitrary code via HTML mail that references or inserts a malicious .chm file containing shortcuts that can be executed, aka "Code Execution via Compiled HTML Help File."
Key phrases: execute arbitrary code, execute arbitrary code via HTML mail that references, code execution via compiled html help file
CVE-2002-0695: Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7.0 or 2000 allows remote attackers to execute arbitrary code via a query that calls the OpenRowSet command.
Key phrases: execute arbitrary code, execute arbitrary code via a query that calls, buffer overflow
CVE-2002-0696: Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames.
Key phrases: execute Visual FoxPro applications without warning via HTML
CVE-2002-0697: Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
Key phrases: bypass authentication, bypass the checks, bypass authentication and modify sensitive data by using
CVE-2002-0698: Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an EHLO request from a system with a long name as obtained through a reverse DNS lookup, which triggers the overflow in IMC's hello response.
Key phrases: execute arbitrary code, execute arbitrary code via an EHLO request from, buffer overflow
CVE-2002-0699: Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0, Windows 2000, and Windows XP allow remote attackers to delete digital certificates on a user's system via HTML.
Key phrases: delete digital certificates on a user's system, unknown
CVE-2002-0700: Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server (MCMS) 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL Server Compromise."
Key phrases: execute code in the Local System context by, buffer overflow, unchecked buffer in mdac function, sql server compromise
CVE-2002-0701: ktrace in BSD-based operating systems allows the owner of a process with special privileges to trace the process after its privileges have been lowered, which may allow the owner to obtain sensitive information that the process obtained while it was running with the extra privileges.
Key phrases: obtain sensitive information, trace the process after its privileges have been, obtain sensitive information that the process obtained while
CVE-2002-0702: Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.
Key phrases: execute arbitrary code, execute arbitrary code via format strings in a
CVE-2002-0703: An interaction between the Perl MD5 module (perl-Digest-MD5) and Perl could produce incorrect MD5 checksums for UTF-8 data, which could prevent a system from properly verifying the integrity of the data.
Key phrases: integrity
CVE-2002-0704: The Network Address Translation (NAT) capability for Netfilter ("iptables") 1.2.6a and earlier leaks translated IP addresses in ICMP error messages.
CVE-2002-0705: The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obtain valid usernames and crack the passwords.
Key phrases: obtain valid usernames and crack the passwords, web-accessible directory
CVE-2002-0706: UserManager.js in the Web Reports Server for SurfControl SuperScout WebFilter uses weak encryption for administrator functions, which allows remote attackers to decrypt the administrative password using a hard-coded key in a Javascript function.
Key phrases: decrypt the administrative password using a hard-, weak encryption, hard-coded key
CVE-2002-0707: The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large GET requests, possibly due to a buffer overflow.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, buffer overflow
CVE-2002-0708: Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences.
Key phrases: read arbitrary files, read arbitrary files via an HTTP request containing, directory traversal
CVE-2002-0709: SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.
Key phrases: execute arbitrary SQL, execute arbitrary SQL queries via the RunReport option, sql injection
CVE-2002-0710: Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter.
Key phrases: read arbitrary files, read arbitrary files by specifying the desired files, directory traversal
CVE-2002-0711: Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service.
Key phrases: cause a denial of service, unknown
CVE-2002-0712: Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform operations that require multiple authorizations.
Key phrases: perform operations that require multiple authorizations
CVE-2002-0713: Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_auth) when using denyusers or allowusers files, (2) via the gopher client, or (3) via the FTP server directory listing parser when HTML output is generated.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflows, directory list
CVE-2002-0714: FTP proxy in Squid before 2.4.STABLE6 does not compare the IP addresses of control and data connections with the FTP server, which allows remote attackers to bypass firewall rules or spoof FTP server responses.
Key phrases: bypass firewall rules, bypass firewall rules or spoof FTP server responses, spoofing
CVE-2002-0715: Vulnerability in Squid before 2.4.STABLE6 related to proxy authentication credentials may allow remote web sites to obtain the user's proxy login and password.
Key phrases: obtain the user's proxy login and password
CVE-2002-0716: Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument.
Key phrases: gain privileges, gain privileges via format string specifiers in the
CVE-2002-0717: PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, error condition, improper memory
CVE-2002-0718: Web authoring command in Microsoft Content Management Server (MCMS) 2001 allows attackers to authenticate and upload executable content, by modifying the upload location, aka "Program Execution via MCMS Authoring Function."
Key phrases: authenticate and upload executable content, program execution via mcms authoring function
CVE-2002-0719: SQL injection vulnerability in the function that services for Microsoft Content Management Server (MCMS) 2001 allows remote attackers to execute arbitrary commands via an MCMS resource request for image files or other files.
Key phrases: execute arbitrary commands, execute arbitrary commands via an MCMS resource request, sql injection
CVE-2002-0720: A handler routine for the Network Connection Manager (NCM) in Windows 2000 allows local users to gain privileges via a complex attack that causes the handler to run in the LocalSystem context with user-specified code.
Key phrases: gain privileges, gain privileges via a complex attack that causes
CVE-2002-0721: Microsoft SQL Server 7.0 and 2000 installs with weak permissions for extended stored procedures that are associated with helper functions, which could allow unprivileged users, and possibly remote attackers, to run stored procedures with administrator privileges via (1) xp_execresultset, (2) xp_printstatements, or (3) xp_displayparamstmt.
Key phrases: run stored procedures with administrator privileges via (, weak permissions
CVE-2002-0722: Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue box to trick users into thinking that the file type is safe to download, aka "File Origin Spoofing."
Key phrases: misrepresent the source of a file in the, file origin spoofing
CVE-2002-0723: Microsoft Internet Explorer 5.5 and 6.0 does not properly verify the domain of a frame within a browser window, which allows remote attackers to read client files or invoke executable objects via the Object tag, aka "Cross Domain Verification in Object Tag."
Key phrases: read client files or invoke executable objects via, cross domain verification in object tag
CVE-2002-0724: Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service (crash) via a SMB_COM_TRANSACTION packet with a request for the (1) NetShareEnum, (2) NetServerEnum2, or (3) NetServerEnum3, aka "Unchecked Buffer in Network Share Provider Can Lead to Denial of Service".
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0725: NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be recorded in the audit trail instead of the target file.
Key phrases: hide file usage activities via a hard link
CVE-2002-0726: Buffer overflow in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to execute arbitrary code via a long server name field.
Key phrases: execute arbitrary code, execute arbitrary code via a long server name, buffer overflow
CVE-2002-0727: The Host function in Microsoft Office Web Components (OWC) 2000 and 2002 is exposed in components that are marked as safe for scripting, which allows remote attackers to execute arbitrary commands via the setTimeout method.
Key phrases: execute arbitrary commands, execute arbitrary commands via the setTimeout method
CVE-2002-0728: Buffer overflow in the progressive reader for libpng 1.2.x before 1.2.4, and 1.0.x before 1.0.14, allows attackers to cause a denial of service (crash) via a PNG data stream that has more IDAT data than indicated by the IHDR chunk.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0729: Microsoft SQL Server 2000 allows remote attackers to cause a denial of service via a malformed 0x08 packet that is missing a colon separator.
Key phrases: cause a denial of service via a malformed, malformed packet
CVE-2002-0730: Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail, or (3) Homepage.
Key phrases: execute Javascript or HTML via fields such as, cross-site scripting
CVE-2002-0731: Cross-site scripting vulnerability in demonstration scripts for vqServer allows remote attackers to execute arbitrary script via a link that contains the script in arguments to demo scripts such as respond.pl.
Key phrases: execute arbitrary script, execute arbitrary script via a link that contains, cross-site scripting
CVE-2002-0732: Cross-site scripting vulnerability in MyGuestbook 1.0 allows remote attackers to execute arbitrary script or inject HTML via fields such as (1) user name or (2) comments.
Key phrases: execute arbitrary script, execute arbitrary script or inject HTML via fields, cross-site scripting
CVE-2002-0733: Cross-site scripting vulnerability in thttpd 2.20 and earlier allows remote attackers to execute arbitrary script via a URL to a nonexistent page, which causes thttpd to insert the script into a 404 error message.
Key phrases: execute arbitrary script, execute arbitrary script via a URL to a, cross-site scripting
CVE-2002-0734: b2edit.showposts.php in B2 2.0.6pre2 and earlier does not properly load the b2config.php file in some configurations, which allows remote attackers to execute arbitrary PHP code via a URL that sets the $b2inc variable to point to a malicious program stored on a remote server.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code via a URL that
CVE-2002-0735: Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code by triggering log messages.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, format string
CVE-2002-0736: Microsoft BackOffice 4.0 and 4.5, when configured to be accessible by other systems, allows remote attackers to bypass authentication and access the administrative ASP pages via an HTTP request with an authorization type (auth_type) that is not blank.
Key phrases: bypass authentication, bypass authentication and access the administrative ASP pages
CVE-2002-0737: Sambar web server before 5.2 beta 1 allows remote attackers to obtain source code of server-side scripts, or cause a denial of service (resource exhaustion) via DOS devices, using a URL that ends with a space and a null character.
Key phrases: denial of service (resource exhaustion), obtain source code of server-side scripts
CVE-2002-0738: MHonArc 2.5.2 and earlier does not properly filter Javascript from archived e-mail messages, which could allow remote attackers to execute script in web clients by (1) splitting the SCRIPT tag into smaller pieces, (2) including the script in a SRC argument to an IMG tag, or (3) using "&={script}" syntax.
Key phrases: execute script in web clients by (1
CVE-2002-0739: Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.
Key phrases: insert arbitrary HTML, insert arbitrary HTML and script, cross-site scripting, arbitrary html, steal cookie
CVE-2002-0740: Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument.
Key phrases: gain privileges, gain privileges via a long -d (SPOOLDIR, buffer overflow
CVE-2002-0741: psyBNC 2.3 allows remote attackers to cause a denial of service (CPU consumption and resource exhaustion) by sending a PASS command with a long password argument and quickly killing the connection, which is not properly terminated by psyBNC.
Key phrases: denial of service (CPU consumption and resource exhaustion), cause a denial of service (CPU consumption, cpu consumption, long password argument
CVE-2002-0742: Buffer overflow in pioout on AIX 4.3.3.
Key phrases: buffer overflow
CVE-2002-0743: mail and mailx in AIX 4.3.3 core dump when called with a very long argument, an indication of a buffer overflow.
Key phrases: buffer overflow
CVE-2002-0744: namerslv in AIX 4.3.3 core dumps when called with a very long argument, possibly as a result of a buffer overflow.
Key phrases: buffer overflow
CVE-2002-0745: Buffer overflow in uucp in AIX 4.3.3.
Key phrases: buffer overflow
CVE-2002-0746: Vulnerability in template.dhcpo in AIX 4.3.3 related to an insecure linker argument.
Key phrases: insecure linker argument
CVE-2002-0747: Buffer overflow in lsmcode in AIX 4.3.3.
Key phrases: buffer overflow
CVE-2002-0748: LabVIEW Web Server 5.1.1 through 6.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that ends in two newline characters, instead of the expected carriage return/newline combinations.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-0749: CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2002-0750: CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field.
Key phrases: read arbitrary files, read arbitrary files by specifying the target filename
CVE-2002-0751: CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a "spam proxy" and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters.
Key phrases: use csMailto as a "spam proxy", arbitrary users
CVE-2002-0752: CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file.
Key phrases: obtain sensitive information, obtain sensitive information by directly accessing the file, web document root
CVE-2002-0753: Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.
Key phrases: execute arbitrary code, execute arbitrary code via an HTTP request with, buffer overflow
CVE-2002-0754: Kerberos 5 su (k5su) in FreeBSD 4.4 and earlier relies on the getlogin system call to determine if the user running k5su is root, which could allow a root-initiated process to regain its privileges after it has dropped them.
Key phrases: regain its privileges after it has dropped them, root-initiated process
CVE-2002-0755: Kerberos 5 su (k5su) in FreeBSD 4.5 and earlier does not verify that a user is a member of the wheel group before granting superuser privileges, which could allow unauthorized users to execute commands as root.
Key phrases: execute commands as root
CVE-2002-0756: Cross-site scripting vulnerability in the authentication page for (1) Webmin 0.96 and (2) Usermin 0.90 allows remote attackers to insert script into an error page and possibly steal cookies.
Key phrases: insert script into an error page and possibly, cross-site scripting, steal cookies
CVE-2002-0757: (1) Webmin 0.96 and (2) Usermin 0.90 with password timeouts enabled allow local and possibly remote attackers to bypass authentication and gain privileges via certain control characters in the authentication information, which can force Webmin or Usermin to accept arbitrary username/session ID combinations.
Key phrases: bypass authentication, gain privileges, bypass authentication and gain privileges via certain control, password timeouts, control characters, arbitrary username session id combinations
CVE-2002-0758: ifup-dhcp script in the sysconfig package for SuSE 8.0 allows remote attackers to execute arbitrary commands via spoofed DHCP responses, which are stored and executed in a file.
Key phrases: execute arbitrary commands, execute arbitrary commands via spoofed DHCP responses, spoofing
CVE-2002-0759: bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a bzip2 archive.
Key phrases: overwrite files via a bzip2 archive
CVE-2002-0760: Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed.
Key phrases: read the files as they are being decompressed, race condition
CVE-2002-0761: bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended.
CVE-2002-0762: shadow package in SuSE 8.0 allows local users to destroy the /etc/passwd and /etc/shadow files or assign extra group privileges to some users by changing filesize limits before calling programs that modify the files.
Key phrases: destroy the /etc/passwd and /etc/, shadow package
CVE-2002-0763: Vulnerability in administration server for HP VirtualVault 4.5 on HP-UX 11.04 allows remote web servers or privileged external processes to bypass access restrictions and establish connections to the server.
Key phrases: bypass access restrictions, bypass access restrictions and establish connections to the
CVE-2002-0764: Phorum 3.3.2a allows remote attackers to execute arbitrary commands via an HTTP request to (1) plugin.php, (2) admin.php, or (3) del.php that modifies the PHORUM[settings_dir] variable to point to a directory that contains a PHP file with the commands.
Key phrases: execute arbitrary commands, execute arbitrary commands via an HTTP request to
CVE-2002-0765: sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authenticate and log in with another user's password.
Key phrases: successfully authenticate and log in with another user
CVE-2002-0766: OpenBSD 2.9 through 3.1 allows local users to cause a denial of service (resource exhaustion) and gain root privileges by filling the kernel's file descriptor table and closing file descriptors 0, 1, or 2 before executing a privileged process, which is not properly handled when OpenBSD fails to open an alternate descriptor.
Key phrases: denial of service (resource exhaustion), gain root privileges, cause a denial of service (resource exhaustion
CVE-2002-0767: simpleinit on Linux systems does not close a read/write FIFO file descriptor before creating a child process, which allows the child process to cause simpleinit to execute arbitrary programs with root privileges.
Key phrases: execute arbitrary programs, cause simpleinit to execute arbitrary programs with root, read write fifo file descriptor, root privilege
CVE-2002-0768: Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command.
Key phrases: execute arbitrary code, execute arbitrary code via a long PASV command, buffer overflow
CVE-2002-0769: The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte, which allows the attackers to (1) obtain the password from the login screen, or (2) reconfigure the adaptor by modifying certain request parameters.
Key phrases: bypass authentication, obtain the password, bypass authentication via an HTTP POST request with, (1) obtain the password from the, http post request
CVE-2002-0770: Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client that does not expand "$" macros, which causes the server to expand the macros and leak the information, as demonstrated using "say $rcon_password."
Key phrases: obtain sensitive server cvar variables, obtain directory listings, obtain directory listings, and execute Q2 server admin commands, leak the information, leak information
CVE-2002-0771: Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters.
Key phrases: inject script and steal cookies via the (, cross-site scripting
CVE-2002-0772: Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.
Key phrases: read arbitrary files, read arbitrary files and directories via a .., directory traversal
CVE-2002-0773: imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath.
Key phrases: delete arbitrary files, copy or delete arbitrary files and directories via
CVE-2002-0774: Hosting Controller creates a default user AdvWebadmin with a default password, which could allow remote attackers to gain privileges if the password is not changed.
Key phrases: gain privileges, gain privileges if the password is not changed, default password
CVE-2002-0775: browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.
Key phrases: view arbitrary directories, view arbitrary directories by specifying the target pathname
CVE-2002-0776: getuserdesc.asp in Hosting Controller 2002 allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter, as addressed by the "UpdateUser" hot fix.
Key phrases: gain privileges, change the passwords of arbitrary users and gain
CVE-2002-0777: Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a long "bind, buffer overflow
CVE-2002-0778: The default configuration of the proxy for Cisco Cache Engine and Content Engine allows remote attackers to use HTTPS to make TCP connections to allowed IP addresses while hiding the actual source IP.
Key phrases: use HTTPS to make TCP connections to allowed
CVE-2002-0779: FTP proxy server for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service (network connectivity loss) via a connection to port 21 with a large amount of random data.
Key phrases: denial of service (network connectivity loss), cause a denial of service (network connectivity
CVE-2002-0780: IP/IPX gateway for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a connection to port 8225 with a large amount of random data, which causes ipipxgw.nlm to ABEND.
Key phrases: cause a denial of service via a connection, abend
CVE-2002-0781: RTSP proxy for Novell BorderManager 3.6 SP 1a allows remote attackers to cause a denial of service via a GET request to port 9090 followed by a series of carriage returns, which causes proxy.nlm to ABEND.
Key phrases: cause a denial of service via a GET, abend
CVE-2002-0782: Novell BorderManager 3.5 with PAT (Port-Address Translate) enabled allows remote attackers to cause a denial of service by filling the connection table with a large number of connection requests to hosts that do not have a specific route, which may be forwarded to the public interface.
Key phrases: cause a denial of service by filling the
CVE-2002-0783: Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.
Key phrases: execute arbitrary JavaScript, execute arbitrary JavaScript in the security context of
CVE-2002-0784: Directory traversal vulnerability in Lysias Lidik web server 0.7b allows remote attackers to list directories via an HTTP request with a ... (modified dot dot).
Key phrases: list directories via an HTTP request with a, directory traversal
CVE-2002-0785: AOL Instant Messenger (AIM) allows remote attackers to cause a denial of service (crash) via an "AddBuddy" link with the ScreenName parameter set to a large number of comma-separated values, possibly triggering a buffer overflow.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0786: iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.
Key phrases: read arbitrary files, read arbitrary files by specifying the target file
CVE-2002-0787: Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.
Key phrases: execute script as the administrator via administrator URLs, cross-site scripting
CVE-2002-0788: An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System (EFS), creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain cleartext information.
Key phrases: obtain cleartext information, cleartext temporary files
CVE-2002-0789: Buffer overflow in search.cgi in mnoGoSearch 3.1.19 and earlier allows remote attackers to execute arbitrary code via a long query (q) parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a long query (, buffer overflow
CVE-2002-0790: clchkspuser and clpasswdremote in AIX expose an encrypted password in the cspoc.log file, which could allow local users to gain privileges.
Key phrases: gain privileges
CVE-2002-0791: Novell Netware FTP server NWFTPD before 5.02r allows remote attackers to cause a denial of service (CPU consumption) via a connection to the server followed by a carriage return, and possibly other invalid commands with improper syntax or length.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption, invalid commands
CVE-2002-0792: The web management interface for Cisco Content Service Switch (CSS) 11000 switches allows remote attackers to cause a denial of service (soft reset) via (1) an HTTPS POST request, or (2) malformed XML data.
Key phrases: denial of service (soft reset), cause a denial of service (soft reset, https post request, malformed xml data
CVE-2002-0793: Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via (1) the, hard link, symbolic link
CVE-2002-0794: The accept_filter mechanism in FreeBSD 4 through 4.5 does not properly remove entries from the incomplete listen queue when adding a syncache, which allows remote attackers to cause a denial of service (network service availability) via a large number of connection attempts, which fills the queue.
Key phrases: denial of service (network service availability), cause a denial of service (network service, connection attempts
CVE-2002-0795: The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files.
Key phrases: delete arbitrary files, delete arbitrary files via a symlink attack on
CVE-2002-0796: Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
Key phrases: gain root privileges, format string
CVE-2002-0797: Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2002-0798: Vulnerability in swinstall for HP-UX 11.00 and 11.11 allows local users to view obtain data views for files that cannot be directly read by the user, which reportedly can be used to cause a denial of service.
Key phrases: obtain data, view obtain data views for files that can, denial of service
CVE-2002-0799: Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long USER argument, buffer overflow
CVE-2002-0800: BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.
Key phrases: list the contents of directories via a URL, badblue
CVE-2002-0801: Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to execute arbitrary code via a direct request to the filter with a long HTTP host header field in a URL for a .jsp file.
Key phrases: execute arbitrary code, execute arbitrary code via a direct request to, buffer overflow
CVE-2002-0802: The multibyte support in PostgreSQL 6.5.x with SQL_ASCII encoding consumes an extra character when processing a character that cannot be converted, which could remove an escape character from the query and make the application subject to SQL injection attacks.
Key phrases: sql injection
CVE-2002-0803: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows remote attackers to display restricted products and components via a direct HTTP request to queryhelp.cgi.
Key phrases: display restricted products and components via a direct, direct http request
CVE-2002-0804: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when configured to perform reverse DNS lookups, allows remote attackers to bypass IP restrictions by connecting from a system with a spoofed reverse DNS hostname.
Key phrases: bypass IP restrictions, bypass IP restrictions by connecting from a system, spoofed reverse dns hostname, spoofing
CVE-2002-0805: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, (1) creates new directories with world-writable permissions, and (2) creates the params file with world-writable permissions, which allows local users to modify the files and execute code.
Key phrases: modify the files and execute code, world-writable permissions
CVE-2002-0806: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, allows authenticated users with editing privileges to delete other users by directly calling the editusers.cgi script with the "del" option.
Key phrases: delete other users by directly calling the editusers.cgi
CVE-2002-0807: Cross-site scripting vulnerabilities in Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, could allow remote attackers to execute script as other Bugzilla users via the full name (real name) field, which is not properly quoted by editusers.cgi.
Key phrases: execute script as other Bugzilla users via the, cross-site scripting
CVE-2002-0808: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, when performing a mass change, sets the groupset of all bugs to the groupset of the first bug, which could inadvertently cause insecure groupset permissions to be assigned to some bugs.
Key phrases: insecure groupset permissions
CVE-2002-0809: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, does not properly handle URL-encoded field names that are generated by some browsers, which could cause certain fields to appear to be unset, which has the effect of removing group permissions on bugs when buglist.cgi is provided with the encoded field names.
Key phrases: url-encoded field names
CVE-2002-0810: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, directs error messages from the syncshadowdb command to the HTML output, which could leak sensitive information, including plaintext passwords, if syncshadowdb fails.
Key phrases: sensitive information
CVE-2002-0811: Bugzilla 2.14 before 2.14.2, and 2.16 before 2.16rc2, may allow remote attackers to cause a denial of service or execute certain queries via a SQL injection attack on the sort order parameter to buglist.cgi.
Key phrases: cause a denial of service or execute certain, sql injection
CVE-2002-0812: Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensitive configuration information by querying for the identification string.
Key phrases: obtain and modify sensitive configuration information, obtain and modify sensitive configuration information by querying, information leak
CVE-2002-0813: Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote attackers to cause a denial of service (reset) or modify configuration via a long filename.
Key phrases: denial of service (reset), cause a denial of service (reset), heap-based buffer overflow, heap based buffer overflow
CVE-2002-0814: Buffer overflow in VMware Authorization Service for VMware GSX Server 2.0.0 build-2050 allows remote authenticated users to execute arbitrary code via a long GLOBAL argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long GLOBAL argument, buffer overflow
CVE-2002-0815: The Javascript "Same Origin Policy" (SOP), as implemented in (1) Netscape, (2) Mozilla, and (3) Internet Explorer, allows a remote web server to access HTTP and SOAP/XML content from restricted sites by mapping the malicious server's parent DNS domain name to the restricted site, loading a page from the restricted site into one frame, and passing the information to the attacker-controlled frame, which is allowed because the document.domain of the two frames matches on the parent domain.
Key phrases: access HTTP and SOAP/XML content from
CVE-2002-0816: Buffer overflow in su in Tru64 Unix 5.x allows local users to gain root privileges via a long username and argument.
Key phrases: gain root privileges, gain root privileges via a long username and, buffer overflow
CVE-2002-0817: Format string vulnerability in super for Linux allows local users to gain root privileges via a long command line argument.
Key phrases: gain root privileges, gain root privileges via a long command line, format string
CVE-2002-0818: wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, negative content-length value
CVE-2002-0819: Format string vulnerability in artsd, when called by artswrapper, allows local users to gain privileges via format strings in the -a argument, which results in an error message that is not properly handled in a call to the arts_fatal function.
Key phrases: gain privileges, gain privileges via format strings in the -a
CVE-2002-0820: FreeBSD kernel 4.6 and earlier closes the file descriptors 0, 1, and 2 after they have already been assigned to /dev/null when the descriptors reference procfs or linprocfs, which could allow local users to reuse the file descriptors in a setuid or setgid program to modify critical data and gain privileges.
Key phrases: gain privileges, reuse the file descriptors in a setuid or
CVE-2002-0821: Buffer overflows in Ethereal 0.9.4 and earlier allow remote attackers to cause a denial of service or execute arbitrary code via (1) the BGP dissector, or (2) the WCP dissector.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflows
CVE-2002-0822: Ethereal 0.9.4 and earlier allows remote attackers to cause a denial of service and possibly excecute arbitrary code via the (1) SOCKS, (2) RSVP, (3) AFS, or (4) LMP dissectors, which can be caused to core dump.
Key phrases: excecute arbitrary code, cause a denial of service and possibly excecute, core dump
CVE-2002-0823: Buffer overflow in Winhlp32.exe allows remote attackers to execute arbitrary code via an HTML document that calls the HTML Help ActiveX control (HHCtrl.ocx) with a long pathname in the Item parameter.
Key phrases: execute arbitrary code, execute arbitrary code via an HTML document that, buffer overflow
CVE-2002-0824: BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device.
Key phrases: change the permissions of arbitrary files via a, symlink
CVE-2002-0825: Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-0826: Buffer overflow in WS_FTP FTP Server 3.1.1 allows remote authenticated users to execute arbitrary code via a long SITE CPWD command.
Key phrases: execute arbitrary code, execute arbitrary code via a long SITE CPWD, buffer overflow
CVE-2002-0827: Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.
Key phrases: gain root privileges, gain root privileges via (1) ppptalk