yahoo-inc/cve-impacts huggingface dataset:
CVE-2002-0369: Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode.
Key phrases: execute arbitrary code, denial of service (restart), cause a denial of service (restart), buffer overflow
CVE-2002-0370: Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflow
CVE-2002-0371: Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.
Key phrases: execute arbitrary code, execute arbitrary code via a gopher:// URL that, buffer overflow, long response
CVE-2002-0372: Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the "Cache Path Disclosure via Windows Media Player".
Key phrases: bypass Internet Explorer's (IE) security mechanisms, cache path disclosure
CVE-2002-0373: The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".
Key phrases: obtain LocalSystem rights, obtain LocalSystem rights via a program that calls, privilege elevation through windows media device manager service
CVE-2002-0374: Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.
Key phrases: execute arbitrary code, execute arbitrary code via format strings in the
CVE-2002-0375: Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript via a URL with the, cross-site scripting, arbitrary javascript
CVE-2002-0376: Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field.
Key phrases: execute arbitrary code, execute arbitrary code via a long pluginspage field, buffer overflow
CVE-2002-0377: Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files.
Key phrases: access MSN web email accounts of other users, world-readable, group-writable files, sensitive information
CVE-2002-0378: The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts.
CVE-2002-0379: Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request.
Key phrases: execute arbitrary code, execute arbitrary code via a long BODY request, buffer overflow
CVE-2002-0380: Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-0381: The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address.
Key phrases: bypass intended filters, bypass intended filters via packets with a unicast
CVE-2002-0382: XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via a /dns command on, dns reverse lookup, shell metacharacters
CVE-2002-0384: Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2002-0385: Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' (double quote) and and '>' characters, which causes the TCL interpreter to crash and include stack data in the output.
Key phrases: obtain sensitive information, obtain sensitive information via a request that contains, crash
CVE-2002-0386: The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.
Key phrases: denial of service (crash), cause a denial of service (crash), malformed http get request, missing data
CVE-2002-0387: Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL.
Key phrases: execute arbitrary code, execute arbitrary code via a long HTTP request, buffer overflow
CVE-2002-0388: Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.
Key phrases: execute script via (1) the admin, cross-site scripting
CVE-2002-0389: Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.
Key phrases: read private mailing list archives, predictable filenames, world-executable directory
CVE-2002-0391: Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
Key phrases: execute arbitrary code, execute arbitrary code by passing a large number, integer overflow
CVE-2002-0392: Apache 1.3 through 1.3.24, and Apache 2.0 through 2.0.36, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a chunk-encoded HTTP request that causes Apache to use an incorrect size.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, chunk-encoded http request, incorrect size
CVE-2002-0393: Buffer overflow in Red-M 1050 (Bluetooth Access Point) management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-0394: Red-M 1050 (Bluetooth Access Point) uses case insensitive passwords, which makes it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords.
Key phrases: brute force guessing, smaller space of possible passwords
CVE-2002-0395: The TFTP server for Red-M 1050 (Bluetooth Access Point) can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods.
Key phrases: tftp server, brute force methods
CVE-2002-0396: The web management server for Red-M 1050 (Bluetooth Access Point) does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session.
Key phrases: connect to the server from the same IP
CVE-2002-0397: Red-M 1050 (Bluetooth Access Point) publicizes its name, IP address, and other information in UDP packets to a broadcast address, which allows any system on the network to obtain potentially sensitive information about the Access Point device by monitoring UDP port 8887.
Key phrases: obtain potentially sensitive information, obtain potentially sensitive information about the Access Point, broadcast address
CVE-2002-0398: Red-M 1050 (Bluetooth Access Point) PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a long user name.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, long user name
CVE-2002-0399: Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1) "/.." or (2) "./.." string, which removes the leading slash but leaves the "..", a variant of CVE-2001-1267.
Key phrases: overwrite arbitrary files, overwrite arbitrary files during archive extraction via a, directory traversal
CVE-2002-0400: ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
Key phrases: denial of service (shutdown), cause a denial of service (shutdown), malformed dns packet, error condition
CVE-2002-0401: SMB dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via malformed packets that cause Ethereal to dereference a NULL pointer.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), malformed packets, null pointer
CVE-2002-0402: Buffer overflow in X11 dissector in Ethereal 0.9.3 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code while Ethereal is parsing keysyms.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0403: DNS dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed packet that causes Ethereal to enter an infinite loop.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, malformed packet, infinite loop
CVE-2002-0404: Vulnerability in GIOP dissector in Ethereal before 0.9.3 allows remote attackers to cause a denial of service (memory consumption).
Key phrases: denial of service (memory consumption), cause a denial of service (memory consumption
CVE-2002-0405: Buffer overflow in Transsoft Broker FTP Server 5.0 evaluation allows remote attackers to cause a denial of service and possibly execute arbitrary code via a CWD command with a large number of . (dot) characters.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-0406: Menasoft SPHERE server 0.99x and 0.5x allows remote attackers to cause a denial of service by establishing a large number of connections to the server without providing login credentials, which prevents other users from being able to log in.
Key phrases: cause a denial of service by establishing a, login credentials
CVE-2002-0407: htcgibin.exe in Lotus Domino server 5.0.9a and earlier allows remote attackers to determine the physical pathname for the server via requests that contain certain MS-DOS device names such as com5, such as (1) a request with a .pl or .java extension, or (2) a request containing a large number of periods, which causes htcgibin.exe to leak the pathname in an error message.
Key phrases: determine the physical pathname for the server via
CVE-2002-0408: htcgibin.exe in Lotus Domino server 5.0.9a and earlier, when configured with the NoBanner setting, allows remote attackers to determine the version number of the server via a request that generates an HTTP 500 error code, which leaks the version in a hard-coded error message.
Key phrases: determine the version number of the server via, hard-coded error message
CVE-2002-0409: orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other users by modifying the OrderID parameter.
Key phrases: view the orders of other users by modifying
CVE-2002-0410: send_message.php in AeroMail before 1.45 allows remote attackers to read arbitrary files on the server, instead of just uploaded files, via an attachment that modifies the filename to be uploaded.
Key phrases: read arbitrary files, read arbitrary files on the server
CVE-2002-0411: Cross-site scripting vulnerability in message.php for AeroMail before 1.45 allows remote attackers to execute Javascript as an AeroMail user via an email message with the script in the Subject line.
Key phrases: execute Javascript as an AeroMail user via an, cross-site scripting
CVE-2002-0412: Format string vulnerability in TraceEvent function for ntop before 2.1 allows remote attackers to execute arbitrary code by causing format strings to be injected into calls to the syslog function, via (1) an HTTP GET request, (2) a user name in HTTP authentication, or (3) a password in HTTP authentication.
Key phrases: execute arbitrary code, execute arbitrary code by causing format strings to
CVE-2002-0413: Cross-site scripting vulnerability in ReBB allows remote attackers to execute arbitrary Javascript and steal cookies via an IMG tag whose URL includes the malicious script.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript and steal cookies via an, cross-site scripting, arbitrary javascript
CVE-2002-0414: KAME-derived implementations of IPsec on NetBSD 1.5.2, FreeBSD 4.5, and other operating systems, does not properly consult the Security Policy Database (SPD), which could cause a Security Gateway (SG) that does not use Encapsulating Security Payload (ESP) to forward forged IPv4 packets.
Key phrases: forged packets
CVE-2002-0415: Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.
Key phrases: read files that are accessible to RealPlayer via, directory traversal
CVE-2002-0416: Buffer overflow in SH39 MailServer 1.21 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long command to the SMTP port.
Key phrases: execute arbitrary code, cause a denial of service, buffer overflow
CVE-2002-0417: Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2002-0418: Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2002-0419: Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which (2) in certain configurations, the server IP address is provided as the realm for Basic authentication, which could reveal real IP addresses that were obscured by NAT, or (3) when NTLM authentication is used, the NetBIOS name of the server and its Windows NT domain are revealed in response to an Authorization request.  NOTE: this entry originally contained a vector (1) in which the server reveals whether it supports Basic or NTLM authentication through 401 Access Denied error messages.  CVE has REJECTED this vector; it is not a vulnerability because the information is already available through legitimate use, since authentication cannot proceed without specifying a scheme that is supported by both the client and the server.
Key phrases: obtain potentially sensitive information, obtain potentially sensitive information or more easily conduct, information leaks in iis through, brute force
CVE-2002-0420: Vulnerability in PureTLS before 0.9b2 related to injection attacks, which could possibly allow remote attackers to corrupt or hijack user sessions.
Key phrases: corrupt or hijack user sessions, injection
CVE-2002-0421: IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, including (1) aexp2.htr, (2) aexp2b.htr, (3) aexp3.htr , or (4) aexp4.htr.
Key phrases: bypass the "User cannot change password
CVE-2002-0422: IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.
Key phrases: determine the internal IP address of the system, blank host header
CVE-2002-0423: Buffer overflow in efingerd 1.5 and earlier, and possibly up to 1.61, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a finger request from an IP address with a long hostname that is obtained via a reverse DNS lookup.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-0424: efingerd 1.61 and earlier, when configured without the -u option, executes .efingerd files as the efingerd user (typically "nobody"), which allows local users to gain privileges as the efingerd user by modifying their own .efingerd file and running finger.
Key phrases: gain privileges, gain privileges as the efingerd user by modifying
CVE-2002-0425: mIRC DCC server protocol allows remote attackers to gain sensitive information such as alternate IRC nicknames via a "100 testing" message in a DCC connection request that cannot be ignored or canceled by the user, which may leak the alternate nickname in a response message.
Key phrases: gain sensitive information, gain sensitive information such as alternate IRC nicknames, leak
CVE-2002-0426: VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys.
Key phrases: manual key entry
CVE-2002-0427: Buffer overflows in fpexec in mod_frontpage before 1.6.1 may allow attackers to gain root privileges.
Key phrases: gain root privileges, buffer overflows
CVE-2002-0428: Check Point FireWall-1 SecuRemote/SecuClient 4.0 and 4.1 allows clients to bypass the "authentication timeout" by modifying the to_expire or expire values in the client's users.C configuration file.
Key phrases: bypass the "authentication, bypass the "authentication timeout" by modifying, bypass authentication
CVE-2002-0429: The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a a binary compatibility interface (lcall).
Key phrases: kill arbitrary processes, kill arbitrary processes via a a binary compatibility
CVE-2002-0430: MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Key phrases: overwrite arbitrary files, bypass authentication, bypass authentication and overwrite arbitrary files via a, symlink
CVE-2002-0431: XTux allows remote attackers to cause a denial of service (CPU consumption) via random inputs in the initial connection.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption, random inputs
CVE-2002-0432: Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow, long helo command
CVE-2002-0433: Pi3Web 2.0.0 allows remote attackers to view restricted files via an HTTP request containing a "*" (wildcard or asterisk) character.
Key phrases: view restricted files via an HTTP request containing, http request
CVE-2002-0434: Marcus S. Xenakis directory.php script allows remote attackers to execute arbitrary commands via shell metacharacters in the dir parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2002-0435: Race condition in the recursive (1) directory deletion and (2) directory move in GNU File Utilities (fileutils) 4.1 and earlier allows local users to delete directories as the user running fileutils by moving a low-level directory to a higher level as it is being deleted, which causes fileutils to chdir to a ".." directory that is higher than expected, possibly up to the root file system.
Key phrases: delete directories as the user running fileutils by, race condition
CVE-2002-0436: sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2002-0437: Smsd in SMS Server Tools (SMStools) before 1.4.8 allows remote attackers to execute arbitrary commands via shell metacharacters (backquotes) in message text, as described with the term "string format vulnerability" by some sources.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters (backquotes, string format
CVE-2002-0438: ZyXEL ZyWALL 10 before 3.50 allows remote attackers to cause a denial of service via an ARP packet with the firewall's IP address and an incorrect MAC address, which causes the firewall to disable the LAN interface.
Key phrases: cause a denial of service via an ARP, incorrect mac address
CVE-2002-0439: Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information fields such as the message field.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript and steal credit card numbers, cross-site scripting, delete items, arbitrary javascript
CVE-2002-0440: Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients.
Key phrases: bypass content scanning via a Content-length header set
CVE-2002-0441: Directory traversal vulnerability in imlist.php for Php Imglist allows remote attackers to read arbitrary code via a .. (dot dot) in the cwd parameter.
Key phrases: read arbitrary code, read arbitrary code via a .. (dot, directory traversal
CVE-2002-0442: Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2002-0443: Microsoft Windows 2000 allows local users to bypass the policy that prohibits reusing old passwords by changing the current password before it expires, which does not enable the check for previous passwords.
Key phrases: bypass the policy, bypass the policy that prohibits reusing old passwords
CVE-2002-0444: Microsoft Windows 2000 running the Terminal Server 90-day trial version, and possibly other versions, does not apply group policies to incoming users when the number of connections to the SYSVOL share exceeds the maximum, e.g. with a maximum number of licenses, which can allow remote authenticated users to bypass group policies.
Key phrases: bypass group policies
CVE-2002-0445: article.php in PHP FirstPost 0.1 allows allows remote attackers to obtain the full pathname of the server via an invalid post number in the post parameter, which leaks the pathname in an error message.
Key phrases: obtain the full pathname of the server via, invalid post number
CVE-2002-0446: categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message.
Key phrases: determine the absolute path of the web server, invalid category id (cid) parameter
CVE-2002-0447: Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request.
Key phrases: list arbitrary directories, list arbitrary directories via a .. (dot, directory traversal
CVE-2002-0448: Xerver Free Web Server 2.10 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request that contains many "C:/" sequences.
Key phrases: denial of service (crash), cause a denial of service (crash), c: sequences
CVE-2002-0449: Buffer overflow in webpsvc.exe for Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long argument to webplus.exe program, which triggers the overflow in webpsvc.exe.
Key phrases: execute arbitrary code, execute arbitrary code via a long argument to, buffer overflow
CVE-2002-0450: Buffer overflow in Talentsoft Web+ 5.0 and earlier allows remote attackers to execute arbitrary code via a long Web Markup Language (wml) file name to (1) webplus.dll or (2) webplus.exe.
Key phrases: execute arbitrary code, execute arbitrary code via a long Web Markup, buffer overflow
CVE-2002-0451: filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code by specifying the URL
CVE-2002-0452: Foundry Networks ServerIron switches do not decode URIs when applying "url-map" rules, which could make it easier for attackers to cause the switch to forward traffic to a different server than intended and exploit vulnerabilities that would otherwise be inaccessible.
Key phrases: inaccessible
CVE-2002-0453: The account lockout capability in Oblix NetPoint 5.2 and earlier only locks out users once for the specified lockout period, which makes it easier for remote attackers to conduct brute force password guessing by waiting until the lockout period ends, then guessing passwords without being locked out again.
Key phrases: brute force password guessing
CVE-2002-0454: Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, infinite loop
CVE-2002-0455: IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.
CVE-2002-0456: Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.
CVE-2002-0457: Cross-site scripting vulnerability in signgbook.php for BG GuestBook 1.0 allows remote attackers to execute arbitrary Javascript via encoded tags such as &lt;, &gt;, and &amp; in fields such as (1) name, (2) email, (3) AIM screen name, (4) website, (5) location, or (6) message.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript via encoded tags such as, cross-site scripting
CVE-2002-0458: Cross-site scripting vulnerability in News-TNK 1.2.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript via the WEB parameter, cross-site scripting, arbitrary javascript
CVE-2002-0459: Cross-site scripting vulnerability in Board-TNK 1.3.1 and earlier allows remote attackers to execute arbitrary Javascript via the WEB parameter.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript via the WEB parameter, cross-site scripting, arbitrary javascript
CVE-2002-0460: Bitvise WinSSHD before 2002-03-16 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of incomplete connections that are not properly terminated, which are not properly freed by SSHd.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion, incomplete connections
CVE-2002-0461: Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that calls location.replace on itself, causing a loop.
Key phrases: denial of service (application crash), cause a denial of service (application crash, loop
CVE-2002-0462: bigsam_guestbook.php for Big Sam (Built-In Guestbook Stand-Alone Module) 1.1.08 and earlier allows remote attackers to cause a denial of service (CPU consumption) or obtain the absolute path of the web server via a displayBegin parameter with a very large number, which leaks the web path in an error message when PHP safe_mode is enabled, or consumes resources when safe_mode is not enabled.
Key phrases: denial of service (CPU consumption), obtain the absolute path of the web server, cause a denial of service (CPU consumption, cpu consumption, consumes resources
CVE-2002-0463: home.php in ARSC (Really Simple Chat) 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsc_language parameter, which leaks the pathname in an error message.
Key phrases: determine the full pathname of the web server, invalid language
CVE-2002-0464: Directory traversal vulnerability in Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files and directories via a .. (dot dot) in arguments to (1) file_editor.asp, (2) folderactions.asp, or (3) editoractions.asp.
Key phrases: modify arbitrary files, read and modify arbitrary files and directories via, directory traversal
CVE-2002-0465: Directory traversal vulnerability in filemanager.asp for Hosting Controller 1.4.1 and earlier allows remote attackers to read and modify arbitrary files, and execute commands, via a .. (dot dot) in the OpenPath parameter.
Key phrases: modify arbitrary files, read and modify arbitrary files, directory traversal, execute commands
CVE-2002-0466: Hosting Controller 1.4.1 and earlier allows remote attackers to browse arbitrary directories via a full C: style pathname in the filepath arguments to (1) Statsbrowse.asp, (2) servubrowse.asp, (3) browsedisk.asp, (4) browsewebalizerexe.asp, or (5) sqlbrowse.asp.
Key phrases: browse arbitrary directories, browse arbitrary directories via a full C:
CVE-2002-0467: Buffer overflows in Ecartis (formerly Listar) 1.0.0 before snapshot 20020125 allows remote attackers to execute arbitrary code via (1) address_match() of mystring.c or (2) other functions in tolist.c.
Key phrases: execute arbitrary code, execute arbitrary code via (1) address_match, buffer overflows
CVE-2002-0468: Buffer overflows in Ecartis (formerly Listar) 1.0.0 in snapshot 20020427 and earlier allow local users to gain privileges via (1) a long command line argument, which is not properly handled in core.c, or possibly via bad uses of sprintf() in (2) moderate.c, (3) lcgi.c, (4) fileapi.c, (5) cookie.c, (6) codes.c, or other files.
Key phrases: gain privileges, gain privileges via (1) a long, buffer overflows
CVE-2002-0469: Ecartis (formerly Listar) 1.0.0 in snapshot 20020125 and earlier does not properly drop privileges when Ecartis is installed setuid-root, "lock-to-user" is not set, and ecartis is called by certain MTA's, which could allow local users to gain privileges.
Key phrases: gain privileges
CVE-2002-0470: PHPNetToolpack 0.1 relies on its environment's PATH to find and execute the traceroute program, which could allow local users to gain privileges by inserting a Trojan horse program into the search path.
Key phrases: gain privileges, gain privileges by inserting a Trojan horse program
CVE-2002-0471: PHPNetToolpack 0.1 allows remote attackers to execute arbitrary code via shell metacharacters in the a_query variable.
Key phrases: execute arbitrary code, execute arbitrary code via shell metacharacters in the
CVE-2002-0472: MSN Messenger Service 3.6, and possibly other versions, uses weak authentication when exchanging messages between clients, which allows remote attackers to spoof messages from other users.
Key phrases: spoof messages from other users, weak authentication, spoofing
CVE-2002-0473: db.php in phpBB 2.0 (aka phpBB2) RC-3 and earlier allows remote attackers to execute arbitrary code from remote servers via the phpbb_root_path parameter.
Key phrases: execute arbitrary code, execute arbitrary code from remote servers via the
CVE-2002-0474: Cross-site scripting vulnerability in ZeroForum allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within IMG image tag.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript on web clients by embedding, cross-site scripting, arbitrary javascript
CVE-2002-0475: Cross-site scripting vulnerability in phpBB 1.4.4 and earlier allows remote attackers to execute arbitrary Javascript on web clients by embedding the script within an IMG image tag while editing a message.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript on web clients by embedding, cross-site scripting, arbitrary javascript
CVE-2002-0476: Standalone Macromedia Flash Player 5.0 allows remote attackers to save arbitrary files and programs via a .SWF file containing the undocumented "save" FSCommand.
Key phrases: save arbitrary files, save arbitrary files and programs via a .SWF
CVE-2002-0477: Standalone Macromedia Flash Player 5.0 before 5,0,30,2 allows remote attackers to execute arbitrary programs via a .SWF file containing the "exec" FSCommand.
Key phrases: execute arbitrary programs, execute arbitrary programs via a .SWF file containing
CVE-2002-0478: The default configuration of Foundry Networks EdgeIron 4802F allows remote attackers to modify sensitive information via arbitrary SNMP community strings.
Key phrases: modify sensitive information via arbitrary SNMP community strings, arbitrary snmp community strings
CVE-2002-0479: Gravity Storm Service Pack Manager 2000 creates a hidden share (SPM2000c$) mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share.
Key phrases: bypass access restrictions, bypass access restrictions on certain directories in the, hidden share
CVE-2002-0480: ISS RealSecure for Nokia devices before IPSO build 6.0.2001.141d is configured to allow a user "skank" on a machine "starscream" to become a key manager when the "first time connection" feature is enabled and before any legitimate administrators have connected, which could allow remote attackers to gain access to the device during installation.
Key phrases: gain access, become a key manager when the "first, gain access to the device during installation
CVE-2002-0481: An interaction between Windows Media Player (WMP) and Outlook 2002 allows remote attackers to bypass Outlook security settings and execute Javascript via an IFRAME in an HTML email message that references .WMS (Windows Media Skin) or other WMP media files, whose onload handlers execute the player.LaunchURL() Javascript function.
Key phrases: bypass Outlook security settings and execute Javascript via, iframe
CVE-2002-0482: Directory traversal vulnerability in PCI Netsupport Manager before version 7, when running web extensions, allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2002-0483: index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname.
Key phrases: determine the physical pathname of the web server, leaks
CVE-2002-0484: move_uploaded_file in PHP does not does not check for the base directory (open_basedir), which could allow remote attackers to upload files to unintended locations on the system.
Key phrases: upload files to unintended locations on the system
CVE-2002-0485: Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case, which is ignored by some mail clients.
Key phrases: bypass content filtering, bypass content filtering via attachments whose Content-
CVE-2002-0486: Intellisol Xpede 4.1 uses weak encryption to store authentication information in cookies, which could allow local users with access to the cookies to gain privileges.
Key phrases: gain privileges, the cookies to gain privileges, weak encryption
CVE-2002-0487: Intellisol Xpede 4.1 stores passwords in plaintext in a Javascript "session timeout" re-authentication capability, which could allow local users with access to gain privileges of other Xpede users by reading the password from the source file, e.g. from the browser's cache.
Key phrases: gain privileges, gain privileges of other Xpede users by reading
CVE-2002-0488: Linux Directory Penguin traceroute.pl CGI script 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the host parameter.
Key phrases: execute arbitrary code, execute arbitrary code via shell metacharacters in the, host parameter
CVE-2002-0489: Linux Directory Penguin NsLookup CGI script (nslookup.pl) 1.0 allows remote attackers to execute arbitrary code via shell metacharacters in the (1) query or (2) type parameters.
Key phrases: execute arbitrary code, execute arbitrary code via shell metacharacters in the
CVE-2002-0490: Instant Web Mail before 0.60 does not properly filter CR/LF sequences, which allows remote attackers to (1) execute arbitrary POP commands via the id parameter in message.php, or (2) modify certain mail message headers via numerous parameters in write.php.
Key phrases: execute arbitrary POP commands, (1) execute arbitrary POP commands via, cr lf sequences
CVE-2002-0491: admin.php in AlGuest 1.0 guestbook checks for the existence of the admin cookie to authenticate the AlGuest administrator, which allows remote attackers to bypass the authentication and gain privileges by setting the admin cookie to an arbitrary value.
Key phrases: bypass the authentication, gain privileges, bypass the authentication and gain privileges by setting, arbitrary value, bypass authentication
CVE-2002-0492: dcshop.cgi in DCShop 1.002 Beta allows remote attackers to delete arbitrary setup files via a null character in the database parameter.
Key phrases: delete arbitrary setup files, delete arbitrary setup files via a null character
CVE-2002-0493: Apache Tomcat may be started without proper security settings if errors are encountered while reading the web.xml file, which could allow attackers to bypass intended restrictions.
Key phrases: bypass intended restrictions
CVE-2002-0494: Cross-site scripting vulnerability in WebSight Directory System 0.1 allows remote attackers to execute arbitrary Javascript and gain access to the WebSight administrator via a new link submission containing the script in a website name.
Key phrases: execute arbitrary Javascript, gain access, execute arbitrary Javascript and gain access to the, cross-site scripting, arbitrary javascript
CVE-2002-0495: csSearch.cgi in csSearch 2.3 and earlier allows remote attackers to execute arbitrary Perl code via the savesetup command and the setup parameter, which overwrites the setup.cgi configuration file that is loaded by csSearch.cgi.
Key phrases: execute arbitrary Perl code, execute arbitrary Perl code via the savesetup command
CVE-2002-0496: The HTTP server for SouthWest Talker server 1.0.0 allows remote attackers to cause a denial of service (server crash) via a malformed URL to port 5002.
Key phrases: denial of service (server crash), cause a denial of service (server crash, malformed url
CVE-2002-0497: Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.
Key phrases: access a raw socket via a long MTR_OPTIONS, buffer overflow
CVE-2002-0498: Etnus TotalView 5.0.0-4 installs certain files with UID 5039 and GID 59, which could allow local users with that UID or GID to modify the files and gain privileges as other TotalView users.
Key phrases: gain privileges, modify the files and gain privileges as other, uid, gid
CVE-2002-0499: The d_path function in Linux kernel 2.2.20 and earlier, and 2.4.18 and earlier, truncates long pathnames without generating an error, which could allow local users to force programs to perform inappropriate operations on the wrong directories.
Key phrases: force programs to perform inappropriate operations on the
CVE-2002-0500: Internet Explorer 5.0 through 6.0 allows remote attackers to determine the existence of files on the client via an IMG tag with a dynsrc property that references the target file, which sets certain elements of the image object such as file size.
Key phrases: determine the existence of files on the client
CVE-2002-0501: Format string vulnerability in log_print() function of Posadis DNS server before version m5pre2 allows local users and possibly remote attackers to execute arbitrary code via format strings that are inserted into logging messages.
Key phrases: execute arbitrary code, execute arbitrary code via format strings that are
CVE-2002-0502: Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page.
Key phrases: list applications without authentication by accessing the applist.asp
CVE-2002-0503: Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuse_Template parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2002-0504: Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp.
Key phrases: execute script in other clients via the NFuse_Application, cross-site scripting
CVE-2002-0505: Memory leak in the Call Telephony Integration (CTI) Framework authentication for Cisco CallManager 3.0 and 3.1 before 3.1(3) allows remote attackers to cause a denial of service (crash and reload) via a series of authentication failures, e.g. via incorrect passwords.
Key phrases: denial of service (crash and reload), cause a denial of service (crash and, memory leak
CVE-2002-0506: Buffer overflow in newt.c of newt windowing library (libnewt) 0.50.33 and earlier may allow attackers to cause a denial of service or execute arbitrary code in setuid programs that use libnewt.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflow
CVE-2002-0507: An interaction between Microsoft Outlook Web Access (OWA) with RSA SecurID allows local users to bypass the SecurID authentication for a previous user via several submissions of an OWA Authentication request with the proper OWA password for the previous user, which is eventually accepted by OWA.
Key phrases: bypass the SecurID authentication, bypass the SecurID authentication for a previous user
CVE-2002-0508: wwwisis 3.45 and earlier allows remote attackers to execute arbitrary commands and read files via the parameters (1) prolog or (2) epilog.
Key phrases: execute arbitrary commands, execute arbitrary commands and read files via the
CVE-2002-0509: Transparent Network Substrate (TNS) Listener in Oracle 9i 9.0.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a single malformed TCP packet to port 1521.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption
CVE-2002-0510: The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux.
Key phrases: determine that a target system is running Linux, ip identification field, non-fragmented packets
CVE-2002-0511: The default configuration of Name Service Cache Daemon (nscd) in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which could make it easier for remote attackers to bypass applications that restrict access based on host names.
Key phrases: bypass applications that restrict access based on host names
CVE-2002-0512: startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries.
Key phrases: gain privileges, gain privileges of other users running startkde via
CVE-2002-0513: The PHP administration script in popper_mod 1.2.1 and earlier relies on Apache .htaccess authentication, which allows remote attackers to gain privileges if the script is not appropriately configured by the administrator.
Key phrases: gain privileges, gain privileges if the script is not appropriately
CVE-2002-0514: PF in OpenBSD 3.0 with the return-rst rule sets the TTL to 128 in the RST packet, which allows remote attackers to determine if a port is being filtered because the TTL is different than the default TTL.
Key phrases: determine if a port is being filtered because
CVE-2002-0515: IPFilter 3.4.25 and earlier sets a different TTL when a port is being filtered than when it is not being filtered, which allows remote attackers to identify filtered ports by comparing TTLs.
Key phrases: identify filtered ports by comparing TTLs
CVE-2002-0516: SquirrelMail 1.2.5 and earlier allows authenticated SquirrelMail users to execute arbitrary commands by modifying the THEME variable in a cookie.
Key phrases: execute arbitrary commands, execute arbitrary commands by modifying the THEME variable
CVE-2002-0517: Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as (1) dtterm or (2) xterm.
Key phrases: gain root privileges, gain root privileges via a long -xrm argument, buffer overflow