yahoo-inc/cve-impacts huggingface dataset:
CVE-2002-0050: Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.
Key phrases: execute arbitrary code, execute arbitrary code via long authentication data, buffer overflow
CVE-2002-0051: Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.
Key phrases: prevent the application of new group policy settings, exclusive-read access
CVE-2002-0052: Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files.
Key phrases: read arbitrary files
CVE-2002-0053: Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request.  NOTE: this candidate may be split or merged with other candidates.  This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflow
CVE-2002-0054: SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.
Key phrases: perform mail relaying via an SMTP AUTH command, null session credentials
CVE-2002-0055: SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.
Key phrases: cause a denial of service via a command, malformed data transfer (bdat) request
CVE-2002-0056: Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection.
Key phrases: execute arbitrary code, execute arbitrary code via a long OLE DB, buffer overflow
CVE-2002-0057: XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
Key phrases: read arbitrary files, read arbitrary files by specifying a local file
CVE-2002-0058: Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.
Key phrases: hijack or sniff a web client's sessions, vulnerability in java runtime environment (jre)
CVE-2002-0059: The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.
Key phrases: execute arbitrary code, execute arbitrary code via a block of malformed, double free, malformed compression data
CVE-2002-0060: IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.
Key phrases: bypass intended firewall restrictions
CVE-2002-0061: Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters (a
CVE-2002-0062: Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."
Key phrases: gain privileges, buffer overflow
CVE-2002-0063: Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values.
Key phrases: execute arbitrary code, execute arbitrary code via long attribute names or, buffer overflow
CVE-2002-0064: Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.
Key phrases: insecure permissions
CVE-2002-0065: Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry.
Key phrases: gain privileges, gain privileges by recovering the passwords from the, weak encryption
CVE-2002-0066: Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.
Key phrases: gain privileges, use the Proxy Host's configuration utilities and, insecure access control
CVE-2002-0067: Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.
Key phrases: bypass intended access restrictions, htcp
CVE-2002-0068: Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.
Key phrases: execute arbitrary code, denial of service (core dump), cause a denial of service (core dump
CVE-2002-0069: Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, memory leak
CVE-2002-0070: Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.
Key phrases: execute arbitrary code, execute arbitrary code via a custom URL handler, buffer overflow
CVE-2002-0071: Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflow
CVE-2002-0072: The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.
Key phrases: denial of service (crash), cause a denial of service (crash), null pointer
CVE-2002-0073: The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.
Key phrases: cause a denial of service via a specially
CVE-2002-0074: Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.
Key phrases: embed scripts into another user's session, cross-site scripting
CVE-2002-0075: Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.
Key phrases: execute arbitrary script, execute arbitrary script as other web users via, cross-site scripting
CVE-2002-0076: Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.
Key phrases: escape the Java sandbox and execute commands via, bytecode verifier, illegal cast operation, virtual machine verifier
CVE-2002-0077: Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable Invocation via Object tag" vulnerability.
Key phrases: invoke executables present on the local system through, popup object, local executable invocation via object tag
CVE-2002-0078: The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
Key phrases: run scripts in the Local Computer zone by, cookie-based script execution
CVE-2002-0079: Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflow
CVE-2002-0080: rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.
CVE-2002-0081: Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.
Key phrases: execute arbitrary code, execute arbitrary code via a multipart/form, buffer overflows
CVE-2002-0082: The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.
Key phrases: execute arbitrary code, use a buffer overflow to execute arbitrary code
CVE-2002-0083: Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.
Key phrases: gain privileges, off-by-one error
CVE-2002-0084: Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.
Key phrases: gain root privileges, gain root privileges via a long mount argument, buffer overflow
CVE-2002-0085: cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.
Key phrases: denial of service (crash), cause a denial of service (crash), invalid procedure call
CVE-2002-0086: Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.
Key phrases: gain root privileges, gain root privileges via a long (1, buffer overflow
CVE-2002-0087: bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files.
Key phrases: create arbitrary files, create arbitrary files via a symlink attack on
CVE-2002-0088: Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.
Key phrases: gain root privileges, gain root privileges via a long media installation, buffer overflow
CVE-2002-0089: Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.
Key phrases: gain root privileges, gain root privileges via long arguments to (, buffer overflow
CVE-2002-0090: Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.
Key phrases: execute arbitrary code, execute arbitrary code via a long display command, buffer overflow
CVE-2002-0091: Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields.
Key phrases: execute arbitrary commands, execute arbitrary commands via certain form fields, cgi scripts
CVE-2002-0092: CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.
Key phrases: denial of service (server crash), cause a denial of service (server crash, diff capability
CVE-2002-0093: Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.
Key phrases: execute arbitrary code, buffer overflow
CVE-2002-0094: config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2002-0095: The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.
Key phrases: upload files and possibly join a user community, user self registration
CVE-2002-0096: The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended.
CVE-2002-0097: Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.
Key phrases: hijack user accounts
CVE-2002-0098: Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.
Key phrases: execute arbitrary code, execute arbitrary code via a long name field, buffer overflow
CVE-2002-0099: Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0100: AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.
Key phrases: bypass authentication, bypass authentication and read password-protected files
CVE-2002-0101: Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released.
Key phrases: cause a denial of service via an infinite, infinite loop, cpu usage
CVE-2002-0102: Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.
Key phrases: cause a denial of service via (1, null characters
CVE-2002-0103: An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.
Key phrases: gain privileges, gain privileges by (1) running webcached, insecure permissions
CVE-2002-0104: AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump.
Key phrases: gain sensitive information, gain sensitive information via a CD (CWD, core dump
CVE-2002-0105: CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.
Key phrases: gain privileges, gain privileges via a symlink attack on /var, world-writable
CVE-2002-0106: BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.
Key phrases: cause a denial of service via a series, ms-dos device name
CVE-2002-0107: Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.
Key phrases: obtain sensitive information, obtain sensitive information via a series of GET, leaked, information leak
CVE-2002-0108: Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
Key phrases: spoof messages as other users by modifying the, hidden form fields, spoofing
CVE-2002-0109: Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.
Key phrases: gain sensitive information, gain sensitive information and cause a denial of, denial of service
CVE-2002-0110: Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.
Key phrases: gain privileges, gain privileges by reading the passwords from the, plaintext
CVE-2002-0111: Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL.
Key phrases: execute arbitrary commands, read files or execute arbitrary commands via a, directory traversal
CVE-2002-0112: Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.
Key phrases: view password protected files via /./ in the
CVE-2002-0113: EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
Key phrases: gain privileges, read sensitive information and possibly gain privileges, world-readable permissions
CVE-2002-0114: EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.
Key phrases: gain privileges, gain privileges by reading the password from the, plaintext
CVE-2002-0115: Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet.
Key phrases: denial of service (crash and core dump), cause a denial of service (crash and, malformed icmp packet
CVE-2002-0116: Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap.
Key phrases: cause a denial of service via a TCP, tcp connect scan
CVE-2002-0117: Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.
Key phrases: execute arbitrary script, execute arbitrary script and steal cookies via a, cross-site scripting
CVE-2002-0118: Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.
Key phrases: execute arbitrary script, execute arbitrary script and steal cookies via a, cross-site scripting
CVE-2002-0119: Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection.
Key phrases: denial of service (reboot), cause a denial of service (reboot), unusual packets
CVE-2002-0120: Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information.
Key phrases: obtain sensitive information, world-readable backup files and folders
CVE-2002-0121: PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.
Key phrases: hijack web connections, temporary files
CVE-2002-0122: Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters.
Key phrases: denial of service (crash), cause a denial of service (crash), unusual characters
CVE-2002-0123: MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.
Key phrases: execute arbitrary commands, cause a denial of service and possibly execute, long http request
CVE-2002-0124: MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.
Key phrases: exploit directory traversal vulnerability via a ../
CVE-2002-0125: Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable.
Key phrases: execute arbitrary code, execute arbitrary code in games that use the, buffer overflow
CVE-2002-0126: Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD.
Key phrases: execute arbitrary code, execute arbitrary code via a long argument to, buffer overflow
CVE-2002-0127: Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service (hang) via a port scan of the WAN port.
Key phrases: denial of service (hang), cause a denial of service (hang)
CVE-2002-0128: cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument.
Key phrases: execute arbitrary code, cause a denial of service, long argument
CVE-2002-0129: efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.
Key phrases: read arbitrary files, read arbitrary files via the -d option, setuid root
CVE-2002-0130: Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long -x argument, buffer overflow
CVE-2002-0131: ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.
Key phrases: read arbitrary files, read arbitrary files via a malicious web page
CVE-2002-0132: Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long HOME environment, buffer overflow
CVE-2002-0133: Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflows
CVE-2002-0134: Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.
Key phrases: execute arbitrary commands, list file contents of the proxy and execute
CVE-2002-0135: Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420).
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-0136: Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript.
Key phrases: denial of service (hang), cause a denial of service (hang), remote web pages, extremely long values
CVE-2002-0137: CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2002-0138: CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.
Key phrases: read arbitrary files, read arbitrary files via the show-data
CVE-2002-0139: Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.
Key phrases: redirect traffic to other sites (aka FTP, ftp bounce
CVE-2002-0140: Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, malformed dns reply
CVE-2002-0141: Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files of other Maelstrom users via, symlink
CVE-2002-0142: CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-0143: Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long HOME environment, buffer overflow
CVE-2002-0144: Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. (dot dot) attack.
Key phrases: change the ownership of files outside of the, directory traversal, .. (dot dot), dot dot attack
CVE-2002-0145: chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root.
Key phrases: change files owned by other users
CVE-2002-0146: fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.
Key phrases: overwrite memory via a message count that exceeds
CVE-2002-0147: Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."
Key phrases: cause a denial of service or execute code, buffer overflow, buffer overrun
CVE-2002-0148: Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.
Key phrases: execute arbitrary script, execute arbitrary script as other users via an, cross-site scripting
CVE-2002-0149: Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-0150: Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.
Key phrases: execute arbitrary code, spoof the safety check for HTTP headers and, buffer overflow, denial of service, spoofing
CVE-2002-0151: Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request.
Key phrases: gain SYSTEM privileges, cause a denial of service or possibly gain, buffer overflow
CVE-2002-0152: Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0153: Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability.
Key phrases: bypass security checks, bypass security checks and invoke local AppleScripts within, local applescript invocation
CVE-2002-0154: Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflows
CVE-2002-0155: Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.
Key phrases: execute arbitrary code, execute arbitrary code via a long ResDLL parameter, buffer overflow
CVE-2002-0157: Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2002-0158: Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.
Key phrases: gain root privileges, gain root privileges via a long -co (, buffer overflow
CVE-2002-0159: Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN  module only (denial of service of administration function) or execute arbitrary code via format strings in the URL to port 2002.
Key phrases: execute arbitrary code, crash the CSADMIN  module only (denial, format string, denial of service
CVE-2002-0160: The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web root via a ..\\\\.. (modified ..) in the URL to port 2002.
Key phrases: read HTML
CVE-2002-0162: LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory.
Key phrases: execute arbitrary code, execute arbitrary code via a symlink attack on
CVE-2002-0163: Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses.
Key phrases: execute arbitrary code, cause a denial of service, heap-based buffer overflow, heap based buffer overflow
CVE-2002-0164: Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges.
Key phrases: gain privileges, read and write arbitrary shared memory, denial of service
CVE-2002-0165: LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different vulnerability than CVE-2002-0162.
Key phrases: gain root privileges, gain root privileges via a symlink attack
CVE-2002-0166: Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.
Key phrases: execute Javascript via an HTTP request containing the, cross-site scripting
CVE-2002-0167: Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), weaknesses of netpbm
CVE-2002-0168: Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), heap corruption
CVE-2002-0169: The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier.
Key phrases: overwrite files outside of the current directory from, insecure option
CVE-2002-0170: Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.
Key phrases: access documents in violation of the intended configuration
CVE-2002-0171: IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges.
Key phrases: gain privileges, log into the icadmin account with an incorrect, incorrect password
CVE-2002-0172: /dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic disruption).
Key phrases: denial of service (traffic disruption), cause a denial of service (traffic disruption, insecure default permissions
CVE-2002-0173: Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.
Key phrases: gain root privileges, buffer overflow
CVE-2002-0174: nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file.
Key phrases: overwrite arbitrary files, gain root privileges, overwrite arbitrary files and gain root privileges via, symlink
CVE-2002-0175: libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.
Key phrases: bypass protection, bypass protection against format string vulnerabilities via format
CVE-2002-0176: The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
Key phrases: exploit certain function calls through arguments that are
CVE-2002-0177: Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.
Key phrases: execute arbitrary code, execute arbitrary code via a long HTTP GET, buffer overflows
CVE-2002-0178: uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.
Key phrases: overwrite files or execute commands
CVE-2002-0179: Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2002-0180: Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname.
Key phrases: execute arbitrary code, execute arbitrary code by connecting to the monitored, buffer overflow
CVE-2002-0181: Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter.
Key phrases: execute arbitrary web script, execute arbitrary web script and steal cookies of, cross-site scripting
CVE-2002-0184: Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.
Key phrases: gain root privileges, gain root privileges via special characters in the, heap-based buffer overflow, heap based buffer overflow
CVE-2002-0185: mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module.
Key phrases: then be accessed via the publisher, call possibly dangerous functions from the imported module
CVE-2002-0186: Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."
Key phrases: execute arbitrary code, execute arbitrary code via data queries with a, buffer overflow, unchecked buffer
CVE-2002-0187: Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."
Key phrases: execute arbitrary script, execute arbitrary script via the root parameter as, cross-site scripting, script injection via xml tag
CVE-2002-0188: Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the second variant of the "Content Disposition" vulnerability.
Key phrases: execute arbitrary code, execute arbitrary code via malformed Content-Disposition, spoofing
CVE-2002-0189: Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability.
Key phrases: execute scripts in the Local Computer zone via, cross-site scripting vulnerability in internet explorer
CVE-2002-0190: Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malformed web page that requires NetBIOS connectivity, aka "Zone Spoofing through Malformed Web Page" vulnerability.
Key phrases: execute arbitrary code, execute arbitrary code under fewer security restrictions via, malformed web page, zone spoofing
CVE-2002-0191: Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability.
Key phrases: view arbitrary files, view arbitrary files that contain the "{, local information disclosure through html object
CVE-2002-0193: Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.
Key phrases: execute arbitrary code, execute arbitrary code via malformed Content-Disposition, spoofing
CVE-2002-0196: GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root.
Key phrases: read or write files outside of the web, to write files
CVE-2002-0197: psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the "[B]" sequence, which makes the message appear legitimate.
Key phrases: spoof encrypted, spoofing
CVE-2002-0198: Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename.
Key phrases: execute arbitrary code, execute arbitrary code via an attachment in a, buffer overflow
CVE-2002-0199: Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-0200: Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name.
Key phrases: cause a denial of service via an HTTP
CVE-2002-0201: Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0202: PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain the encrypted server password via the world-readable oekakibbs.conf file, or (2) modify the server configuration via the world-writeable /oekaki/ folder.
Key phrases: obtain the encrypted server password, (1) obtain the encrypted server password, insecure permissions
CVE-2002-0203: ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter.
Key phrases: view directory contents via an empty pg parameter
CVE-2002-0204: Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command.
Key phrases: execute arbitrary code, execute arbitrary code via a long command, buffer overflow
CVE-2002-0205: Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter.
Key phrases: execute arbitrary script, execute arbitrary script on other clients via the, cross-site scripting (css)
CVE-2002-0206: index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code by specifying a URL
CVE-2002-0207: Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header.
Key phrases: execute arbitrary code, execute arbitrary code via a header length value, buffer overflow
CVE-2002-0208: PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire.
Key phrases: determine that the system is running PGPfire
CVE-2002-0209: Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address.
Key phrases: determine the real IP address of a web, half-closed session
CVE-2002-0210: setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on