yahoo-inc/cve-impacts huggingface dataset:
CVE-2002-0980: The Web Folder component for Internet Explorer 5.5 and 6.0 writes an error message to a known location in the temporary folder, which allows remote attackers to execute arbitrary code by injecting it into the error message, then referring to the error message file via a mhtml: URL.
Key phrases: execute arbitrary code, execute arbitrary code by injecting it into the
CVE-2002-0981: Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line.
Key phrases: execute arbitrary code, execute arbitrary code via a long command line, buffer overflow
CVE-2002-0982: Microsoft SQL Server 2000 SP2, when configured as a distributor, allows attackers to execute arbitrary code via the @scriptfile parameter to the sp_MScopyscript stored procedure.
Key phrases: execute arbitrary code, execute arbitrary code via the @scriptfile parameter to
CVE-2002-0983: IRC client irssi in irssi-text before 0.8.4 allows remote attackers to cause a denial of service (crash) via an IRC channel that has a long topic followed by a certain string, possibly triggering a buffer overflow.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0984: The IRC script included in Light 2.7.x before 2.7.30p5, and 2.8.x before 2.8pre10, running EPIC allows remote attackers to execute arbitrary code if the user joins a channel whose topic includes EPIC4 code.
Key phrases: execute arbitrary code, execute arbitrary code if the user joins a
CVE-2002-0985: Argument injection vulnerability in the mail function for PHP 4.x to 4.2.2 may allow attackers to bypass safe mode restrictions and modify command line arguments to the MTA (e.g. sendmail) in the 5th argument to mail(), altering MTA behavior and possibly executing commands.
Key phrases: bypass safe mode restrictions, bypass safe mode restrictions and modify command line, argument injection, altering mta behavior, executing commands, execute commands
CVE-2002-0986: The mail function in PHP 4.x to 4.2.2 does not filter ASCII control characters from its arguments, which could allow remote attackers to modify mail message content, including mail headers, and possibly use PHP as a "spam proxy."
Key phrases: modify mail message content, ascii control characters, spam proxy
CVE-2002-0987: X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.
Key phrases: gain privileges, local users
CVE-2002-0988: Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities.
Key phrases: buffer overflow
CVE-2002-0989: The URL handler in the manual browser option for Gaim before 0.59.1 allows remote attackers to execute arbitrary script via shell metacharacters in a link.
Key phrases: execute arbitrary script, execute arbitrary script via shell metacharacters in a, url handler
CVE-2002-0990: The web proxy component in Symantec Enterprise Firewall (SEF) 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service (connection resource exhaustion) via multiple connection requests to domains whose DNS server is unresponsive or does not exist, which generates a long timeout.
Key phrases: denial of service (connection resource exhaustion), cause a denial of service (connection resource, long timeout
CVE-2002-0991: Buffer overflows in the cifslogin command for HP CIFS/9000 Client A.01.06 and earlier, based on the Sharity package, allows local users to gain root privileges via long (1) -U, (2) -D, (3) -P, (4) -S, (5) -N, or (6) -u parameters.
Key phrases: gain root privileges, gain root privileges via long (1), buffer overflows
CVE-2002-0992: Unknown vulnerability in IPV6 functionality for DCE daemons (1) dced or (2) rpcd on HP-UX 11.11 allows attackers to cause a denial of service (crash) via an attack that modifies internal data.
Key phrases: denial of service (crash), cause a denial of service (crash), unknown
CVE-2002-0993: Unknown vulnerability in HP Instant Support Enterprise Edition (ISEE) product U2512A for HP-UX 11.00 and 11.11 may allow authenticated users to access restricted files.
Key phrases: access restricted files, unknown
CVE-2002-0994: SunPCi II VNC uses a weak authentication scheme, which allows remote attackers to obtain the VNC password by sniffing the random byte challenge, which is used as the key for encrypted communications.
Key phrases: obtain the VNC password, obtain the VNC password by sniffing the random, weak authentication scheme
CVE-2002-0995: login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
Key phrases: gain privileges, gain privileges via a direct call to login.php
CVE-2002-0996: Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) WebAdmin or (2) ModWeb.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflows
CVE-2002-0997: Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service.
Key phrases: cause a denial of service, buffer overflows
CVE-2002-0998: Directory traversal vulnerability in cafenews.php for CARE 2002 before beta 1.0.02 allows remote attackers to read arbitrary files via .. (dot dot) sequences and null characters in the lang parameter, which is processed by a call to the include function.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2002-0999: Multiple SQL injection vulnerabilities in CARE 2002 before beta 1.0.02 allow remote attackers to perform unauthorized database operations.
Key phrases: perform unauthorized database operations, sql injection
CVE-2002-1000: Buffer overflow in AnalogX SimpleServer:Shout 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long request to TCP port 8001.
Key phrases: execute arbitrary code, cause a denial of service and execute arbitrary, buffer overflow
CVE-2002-1001: Buffer overflows in AnalogX Proxy before 4.12 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long HTTP request to TCP port 6588 or (2) a SOCKS 4A request to TCP port 1080 with a long DNS hostname.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflows
CVE-2002-1002: Buffer overflow in Novell iManager (eMFrame 1.2.1) allows remote attackers to cause a denial of service (crash) via a long user name.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-1003: Buffer overflow in MyWebServer 1.02 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Key phrases: execute arbitrary code, execute arbitrary code via a long HTTP GET, buffer overflow
CVE-2002-1004: Directory traversal vulnerability in webmail feature of ArGoSoft Mail Server Plus or Pro 1.8.1.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2002-1005: ArGoSoft Mail Server 1.8.1.7 and earlier allows a webmail user to cause a denial of service (CPU consumption) by forwarding the email to the user while autoresponse is enabled, which creates an infinite loop.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption, autoresponse, infinite loop
CVE-2002-1006: Cross-site scripting (XSS) vulnerability in BBC Education Text to Speech Internet Enhancer (Betsie) 1.5.11 and earlier allows remote attackers to execute arbitrary web script via parserl.pl.
Key phrases: execute arbitrary web script, execute arbitrary web script via parserl.pl, cross-site scripting (xss)
CVE-2002-1007: Cross-site scripting vulnerabilities in Blackboard 5 allow remote attackers to execute arbitrary web script via (1) the course_id parameter in a link to login.pl, (2) the CTID parameter in ProcessInfo.cgi, or (3) the Message parameter in index.cgi.
Key phrases: execute arbitrary web script, execute arbitrary web script via (1), cross-site scripting
CVE-2002-1008: Cross-site scripting vulnerability in PowerBASIC urlcount.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via a request to urlcount.cgi that contains the script, which is not filtered when the REPORT capability prints the original request.
Key phrases: execute arbitrary web script, execute arbitrary web script in other web browsers, cross-site scripting
CVE-2002-1009: Cross-site scripting vulnerability in PowerBASIC pbcgi.cgi, as included in Lil' HTTP web server, allows remote attackers to execute arbitrary web script in other web browsers via the (1) "Name" or (2) "E-mail" parameters.
Key phrases: execute arbitrary web script, execute arbitrary web script in other web browsers, cross-site scripting
CVE-2002-1010: Lotus Domino R4 allows remote attackers to bypass access restrictions for files in the web root via an HTTP request appended with a "?" character, which is treated as a wildcard character and bypasses the web handlers.
Key phrases: bypass access restrictions, bypass access restrictions for files in the web, http request
CVE-2002-1011: Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflow
CVE-2002-1012: Buffer overflow in web server for Tivoli Management Framework (TMF) ManagedNode 3.6.x through 3.7.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflow
CVE-2002-1013: Buffer overflow in traffic_manager for Inktomi Traffic Server 4.0.18 through 5.2.2, Traffic Edge 1.1.2 and 1.5.0, and Media-IXT 3.0.4 allows local users to gain root privileges via a long -path argument.
Key phrases: gain root privileges, gain root privileges via a long -path argument, buffer overflow
CVE-2002-1014: Buffer overflow in RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary code via an RFS skin file whose skin.ini contains a long value in a CONTROLnImage argument, such as CONTROL1Image.
Key phrases: execute arbitrary code, execute arbitrary code via an RFS skin file, buffer overflow
CVE-2002-1015: RealJukebox 2 1.0.2.340 and 1.0.2.379, and RealOne Player Gold 6.0.10.505, allows remote attackers to execute arbitrary script in the Local computer zone by inserting the script into the skin.ini file of an RJS archive, then referencing skin.ini from a web page after it has been extracted, which is parsed as HTML by Internet Explorer or other Microsoft-based web readers.
Key phrases: execute arbitrary script, execute arbitrary script in the Local computer zone, local computer zone
CVE-2002-1016: Adobe eBook Reader allows a user to bypass restrictions for copy, print, lend, and give operations by backing up key data files, performing the operations, and restoring the original data files.
Key phrases: bypass restrictions, bypass restrictions for copy
CVE-2002-1017: Adobe eBook Reader 2.1 and 2.2 allows a user to copy eBooks to other systems by using the backup feature, capturing the encryption Challenge, and using the appropriate hash function to generate the activation code.
Key phrases: copy eBooks to other systems by using the
CVE-2002-1018: The library feature for Adobe Content Server 3.0 does not verify if a customer has already checked out an eBook, which allows remote attackers to cause a denial of service (resource exhaustion) by checking out the same book multiple times.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion
CVE-2002-1019: The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp.
Key phrases: check out an eBook for an arbitrary length
CVE-2002-1020: The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook even when the maximum number of loans is exceeded by accessing the "Add to bookbag" feature when the server reports that no more copies are available.
Key phrases: check out an eBook even when the maximum
CVE-2002-1021: BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte.
Key phrases: read restricted files, badblue server, hex-encoded null byte
CVE-2002-1022: BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges.
Key phrases: gain privileges, plaintext
CVE-2002-1023: BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI.
Key phrases: denial of service (crash), cause a denial of service (crash), badblue server
CVE-2002-1024: Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, ssh attack detection overflow
CVE-2002-1025: JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in an HTTP GET request, which causes the server to send the .JSP file unparsed.
Key phrases: read JSP source code via an encoded null, encoded null byte, unparsed
CVE-2002-1026: Macromedia Sitespring 1.2.0 (277.1) using Sybase runtime engine 7.0.2.1480 allows remote attackers to cause a denial of service (crash) via a long malformed request to TCP port 2500, possibly triggering a buffer overflow.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-1027: Cross-site scripting vulnerability in the default HTTP 500 error script (500error.jsp) for Macromedia Sitespring 1.2.0 (277.1) allows remote attackers to execute arbitrary web script via a link to 500error.jsp with the script in 1the et parameter.
Key phrases: execute arbitrary web script, execute arbitrary web script via a link to, cross-site scripting
CVE-2002-1028: Multiple buffer overflows in the CGI programs for Oddsock Song Requester WinAmp plugin 2.1 allow remote attackers to cause a denial of service (crash) via long arguments.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflows
CVE-2002-1029: Res Manager in Worldspan for Windows Gateway 4.1 allows remote attackers to cause a denial of service (crash) via a malformed request to TCP port 17990.
Key phrases: denial of service (crash), cause a denial of service (crash), malformed request
CVE-2002-1030: Race condition in Performance Pack in BEA WebLogic Server and Express 5.1.x, 6.0.x, 6.1.x and 7.0 allows remote attackers to cause a denial of service (crash) via a flood of data and connections.
Key phrases: denial of service (crash), cause a denial of service (crash), race condition, flood of data and connections
CVE-2002-1031: KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.
Key phrases: list directories and read restricted files via an
CVE-2002-1032: Buffer overflow in KeyFocus (KF) web server 1.0.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed HTTP header.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-1033: Directory traversal vulnerability in none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via a "..:" sequence (dot-dot variant) in the argument.
Key phrases: read arbitrary files, read arbitrary files via a "..:, directory traversal
CVE-2002-1034: none.php for SunPS iRunbook 2.5.2 allows remote attackers to read arbitrary files via an absolute pathname in the argument.
Key phrases: read arbitrary files, read arbitrary files via an absolute pathname in
CVE-2002-1035: Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-1036: Cross-site scripting vulnerability in search.pl for Fluid Dynamics Search Engine (FDSE) before 2.0.0.0055 allows remote attackers to execute web script via the (1) Rank or (2) Match parameters.
Key phrases: execute web script via the (1), cross-site scripting
CVE-2002-1037: Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features.
Key phrases: inject arbitrary HTML, cross-site scripting, arbitrary html
CVE-2002-1038: Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2) Work Orders: Import features.
Key phrases: conduct certain operations on arbitrary files via the, file upload
CVE-2002-1039: Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot dot) sequences when downloading files from the Projects: Attachments feature.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2002-1040: Unknown vulnerability in the WebSecure (DFSWeb) configuration utilities in AIX 4.x, possibly related to relative pathnames.
Key phrases: unknown
CVE-2002-1041: Unknown vulnerability in DCE (1) SMIT panels and (2) configuration commands, possibly related to relative pathnames.
Key phrases: unknown
CVE-2002-1042: Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\\\\ (dot-dot backslash) sequences in the NS-query-pat parameter.
Key phrases: read arbitrary files, read arbitrary files via ..\\\\ (dot, directory traversal
CVE-2002-1043: Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Subject ("\\\\t\\\\t").
Key phrases: denial of service (crash), cause a denial of service (crash), malformed subject (\\\\t\\\\t)
CVE-2002-1044: Buffer overflow in Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Subject field.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-1045: Ultrafunk Popcorn 1.20 allows remote attackers to cause a denial of service (crash) via a malformed Date field that is converted into a year greater than 2037.
Key phrases: denial of service (crash), cause a denial of service (crash), malformed date field
CVE-2002-1046: Dynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to TCP port 4110.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-1047: The FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name.
Key phrases: gain privileges, gain privileges with a correct password but an, incorrect user name
CVE-2002-1048: HP JetDirect printers allow remote attackers to obtain the administrative password for the (1) web and (2) telnet services via an SNMP request to the variable (.iso.3.6.1.4.1.11.2.3.9.4.2.1.3.9.1.1.0.
Key phrases: obtain the administrative password, obtain the administrative password for the (1, snmp request
CVE-2002-1049: Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.
Key phrases: denial of service (crash), cause a denial of service (crash), format string
CVE-2002-1050: Buffer overflow in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long line of image data.
Key phrases: execute arbitrary code, cause a denial of service, buffer overflow
CVE-2002-1051: Format string vulnerability in TrACESroute 6.0 GOLD (aka NANOG traceroute) allows local users to execute arbitrary code via the -T (terminator) command line argument.
Key phrases: execute arbitrary code, execute arbitrary code via the -T (terminator, format string
CVE-2002-1052: Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to (1) cause a denial of service using the "con" device, or (2) obtain the physical path of the server using two requests to the "aux" device.
Key phrases: obtain the physical path of the server using, use MS-DOS device names in HTTP, ms-dos device names, denial of service
CVE-2002-1053: Cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server before 2.2.1 allows remote attackers to execute arbitrary script via a URL that contains a reference to a nonexistent host followed by the script, which is included in the resulting error message.
Key phrases: execute arbitrary script, execute arbitrary script via a URL that contains, cross-site scripting (xss)
CVE-2002-1054: Directory traversal vulnerability in Pablo FTP server 1.0 build 9 and earlier allows remote authenticated users to list arbitrary directories via "..\\\\" (dot-dot backslash) sequences in a LIST command.
Key phrases: list arbitrary directories, list arbitrary directories via "..\\\\", directory traversal
CVE-2002-1055: Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password.
Key phrases: cause a denial of service via a long, buffer overflow
CVE-2002-1056: Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text Format (RTF), which could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.
Key phrases: execute arbitrary scripts, execute arbitrary scripts via an email that the
CVE-2002-1057: Buffer overflow in SmartMax MailMax POP3 daemon (popmax) 4.8 allows remote attackers to execute arbitrary code via a long USER command.
Key phrases: execute arbitrary code, execute arbitrary code via a long USER command, buffer overflow
CVE-2002-1058: Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.
Key phrases: gain privileges, gain privileges as the Qube Admin via .., directory traversal
CVE-2002-1059: Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string.
Key phrases: execute arbitrary code, execute arbitrary code via a long SSH1 protocol, buffer overflow
CVE-2002-1060: Cross-site scripting (XSS) vulnerability in Blue Coat Systems (formerly CacheFlow) CacheOS on Client Accelerator 4.1.06, Security Gateway 2.1.02, and Server Accelerator 4.1.06 allows remote attackers to inject arbitrary web script or HTML via a URL to a nonexistent hostname that includes the HTML, which is inserted into the resulting error page.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via a, cross-site scripting (xss)
CVE-2002-1061: Multiple buffer overflows in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) an HTTP GET request with a long major version number, (2) an HTTP GET request to the HTTP proxy on port 3128 with a long major version number, (3) a long OK reply from a POP3 server, and (4) a long SMTP server response.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflows
CVE-2002-1062: Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.
Key phrases: execute arbitrary code, execute arbitrary code via long (1), signedness error
CVE-2002-1063: Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion
CVE-2002-1064: Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server.
Key phrases: identify valid users on the server
CVE-2002-1065: Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing.
Key phrases: gain privileges, unsuccessful login attempts, brute force username and password guessing
CVE-2002-1066: Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, a buffer overflow attack
CVE-2002-1067: Administrative web interface for IC9 Pocket Print Server Firmware 7.1.30 and 7.1.36f allows remote attackers to cause a denial of service (reboot and reset) via a long password, possibly due to a buffer overflow.
Key phrases: denial of service (reboot and reset), cause a denial of service (reboot and, buffer overflow
CVE-2002-1068: The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request.
Key phrases: denial of service (hang), cause a denial of service (hang)
CVE-2002-1069: The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm, (2) Device Status, or (3) Device Information.
Key phrases: bypass authentication, obtain sensitive information, bypass authentication and release DHCP addresses or obtain
CVE-2002-1070: Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter.
Key phrases: execute script as other PHPWiki users via the, cross-site scripting
CVE-2002-1071: ZyXEL Prestige 642R allows remote attackers to cause a denial of service in the Telnet, FTP, and DHCP services (crash) via a TCP packet with both the SYN and ACK flags set.
Key phrases: cause a denial of service in the Telnet, crash
CVE-2002-1072: ZyXEL Prestige 642R 2.50(FA.1) and Prestige 310 V3.25(M.01), allows remote attackers to cause a denial of service via an oversized, fragmented "jolt" style ICMP packet.
Key phrases: cause a denial of service via an oversized
CVE-2002-1073: Buffer overflow in the control service for MERCUR Mailserver 4.2 allows remote attackers to execute arbitrary code via a long password.
Key phrases: execute arbitrary code, execute arbitrary code via a long password, buffer overflow
CVE-2002-1075: Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-1076: Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0.
Key phrases: execute arbitrary code, execute arbitrary code via a long HTTP GET, buffer overflow
CVE-2002-1077: IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.
Key phrases: denial of service (crash), cause a denial of service (crash), content-length field
CVE-2002-1078: Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters.
Key phrases: list directory contents via an HTTP GET request
CVE-2002-1079: Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\\\\ (dot-dot backslash) sequences in an HTTP GET request.
Key phrases: read arbitrary files, read arbitrary files via ..\\\\ (dot, directory traversal
CVE-2002-1080: The Administration console for Abyss Web Server 1.0.3 before Patch 2 allows remote attackers to gain privileges and modify server configuration via direct requests to CHL files such as (1) srvstatus.chl, (2) consport.chl, (3) general.chl, (4) srvparam.chl, and (5) advanced.chl.
Key phrases: gain privileges, gain privileges and modify server configuration via direct
CVE-2002-1081: The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character.
Key phrases: read files without providing login credentials via an
CVE-2002-1082: The Image Upload capability for ezContents 1.40 and earlier allows remote attackers to cause ezContents to perform operations on local files as if they were uploaded.
Key phrases: cause ezContents to perform operations on local files, image upload capability, file upload
CVE-2002-1083: Directory traversal vulnerabilities in ezContents 1.41 and earlier allow remote attackers to cause ezContents to (1) create directories using the Maintain Images:Add New:Create Subdirectory item, or (2) list directories using the Maintain Images file listing, via .. (dot dot) sequences.
Key phrases: cause ezContents to (1) create directories, directory traversal
CVE-2002-1084: The VerifyLogin function in ezContents 1.41 and earlier does not properly halt program execution if a user fails to log in properly, which allows remote attackers to modify and view restricted information via HTTP POST requests.
Key phrases: modify and view restricted information via HTTP POST
CVE-2002-1085: Multiple cross-site scripting vulnerabilities in ezContents 1.41 and earlier allow remote attackers to execute script and steal cookies via the diary and other capabilities.
Key phrases: execute script and steal cookies via the diary, cross-site scripting
CVE-2002-1086: Multiple SQL injection vulnerabilities in ezContents 1.41 and earlier allow remote attackers to conduct unauthorized activities.
Key phrases: conduct unauthorized activities, sql injection
CVE-2002-1087: The scripts (1) createdir.php, (2) removedir.php and (3) uploadfile.php for ezContents 1.41 and earlier do not check credentials, which allows remote attackers to create or delete directories and upload files via a direct HTTP POST request.
Key phrases: create or delete directories and upload files via, credentials
CVE-2002-1088: Buffer overflow in Novell GroupWise 6.0.1 Support Pack 1 allows remote attackers to execute arbitrary code via a long RCPT TO command.
Key phrases: execute arbitrary code, execute arbitrary code via a long RCPT TO, buffer overflow
CVE-2002-1089: rwcgi60 CGI program in Oracle Reports Server, by design, provides sensitive information such as the full pathname, which could enable remote attackers to use the information in additional attacks.
Key phrases: sensitive information, full pathname, additional
CVE-2002-1090: Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denial of service via long server responses.
Key phrases: execute arbitrary code, (1) execute arbitrary code via a, buffer overflow, denial of service
CVE-2002-1091: Netscape 6.2.3 and earlier, and Mozilla 1.0.1, allow remote attackers to corrupt heap memory and execute arbitrary code via a GIF image with a zero width.
Key phrases: execute arbitrary code, corrupt heap memory and execute arbitrary code via, zero width
CVE-2002-1092: Cisco VPN 3000 Concentrator 3.6(Rel) and earlier, and 2.x.x, when configured to use internal authentication with group accounts and without any user accounts, allows remote VPN clients to log in using PPTP or IPSEC user authentication.
Key phrases: log in using PPTP or IPSEC user authentication
CVE-2002-1093: HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3(B) allows remote attackers to cause a denial of service (CPU consumption) via a long URL request.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption
CVE-2002-1094: Information leaks in Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.5.4 allow remote attackers to obtain potentially sensitive information via the (1) SSH banner, (2) FTP banner, or (3) an incorrect HTTP request.
Key phrases: obtain potentially sensitive information, obtain potentially sensitive information via the (1, information leaks
CVE-2002-1095: Cisco VPN 3000 Concentrator before 2.5.2(F), with encryption enabled, allows remote attackers to cause a denial of service (reload) via a Windows-based PPTP client with the "No Encryption" option set.
Key phrases: denial of service (reload), cause a denial of service (reload)
CVE-2002-1096: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.1, allows restricted administrators to obtain user passwords that are stored in plaintext in HTML source code.
Key phrases: obtain user passwords, obtain user passwords that are stored in plaintext
CVE-2002-1097: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.2, allows restricted administrators to obtain certificate passwords that are stored in plaintext in the HTML source code for Certificate Management pages.
Key phrases: obtain certificate passwords, obtain certificate passwords that are stored in plaintext
CVE-2002-1098: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, adds an "HTTPS on Public Inbound (XML-Auto)(forward/in)" rule but sets the protocol to "ANY" when the XML filter configuration is enabled, which ultimately allows arbitrary traffic to pass through the concentrator.
Key phrases: allows arbitrary traffic, pass through the concentrator
CVE-2002-1099: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to obtain potentially sensitive information without authentication by directly accessing certain HTML pages.
Key phrases: obtain potentially sensitive information, obtain potentially sensitive information without authentication by directly
CVE-2002-1100: Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.3, allows remote attackers to cause a denial of service (crash) via a long (1) username or (2) password to the HTML login interface.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-1101: Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via a long user name.
Key phrases: cause a denial of service via a long, long user name
CVE-2002-1102: The LAN-to-LAN IPSEC capability for Cisco VPN 3000 Concentrator 2.2.x, and 3.x before 3.5.4, allows remote attackers to cause a denial of service via an incoming LAN-to-LAN connection with an existing security association with another device on the remote network, which causes the concentrator to remove the previous connection.
Key phrases: cause a denial of service via an incoming
CVE-2002-1103: Cisco VPN 3000 Concentrator 2.2.x, 3.6(Rel), and 3.x before 3.5.5, allows remote attackers to cause a denial of service via (1) malformed or (2) large ISAKMP packets.
Key phrases: cause a denial of service via (1, large isakmp packets
CVE-2002-1104: Cisco Virtual Private Network (VPN) Client software 2.x.x and 3.x before 3.0.5 allows remote attackers to cause a denial of service (crash) via TCP packets with source and destination ports of 137 (NETBIOS).
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-1105: Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, allows local users to use a utility program to obtain the group password.
Key phrases: obtain the group password, use a utility program to obtain the group
CVE-2002-1106: Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.1C, does not properly verify that certificate DN fields match those of the certificate from the VPN Concentrator, which allows remote attackers to conduct man-in-the-middle attacks.
Key phrases: conduct man-in-the-middle, man in the middle
CVE-2002-1107: Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.5.2B, does not generate sufficiently random numbers, which may make it vulnerable to certain attacks such as spoofing.
Key phrases: spoofing
CVE-2002-1108: Cisco Virtual Private Network (VPN) Client software 2.x.x, and 3.x before 3.6(Rel), when configured with all tunnel mode, can be forced into acknowledging a TCP packet from outside the tunnel.
Key phrases: tcp packet, outside the tunnel
CVE-2002-1109: securetar, as used in AMaViS shell script 0.2.1 and earlier, allows users to cause a denial of service (CPU consumption) via a malformed TAR file, possibly via an incorrect file size parameter.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption, malformed tar file, incorrect file size parameter
CVE-2002-1110: Multiple SQL injection vulnerabilities in Mantis 0.17.2 and earlier, when running without magic_quotes_gpc enabled, allows remote attackers to gain privileges or perform unauthorized database operations via modified form fields, e.g. to account_update.php.
Key phrases: gain privileges, gain privileges or perform unauthorized database operations via, sql injection
CVE-2002-1111: print_all_bug_page.php in Mantis 0.17.3 and earlier does not verify the limit_reporters option, which allows remote attackers to view bug summaries for bugs that would otherwise be restricted.
Key phrases: view bug summaries for bugs that would otherwise
CVE-2002-1112: Mantis before 0.17.4 allows remote attackers to list project bugs without authentication by modifying the cookie that is used by the "View Bugs" page.
Key phrases: list project bugs without authentication by modifying the
CVE-2002-1113: summary_graph_functions.php in Mantis 0.17.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the g_jpgraph_path parameter to reference the location of the PHP code.
Key phrases: execute arbitrary PHP code, execute arbitrary PHP code by modifying the g_jpgraph_path
CVE-2002-1114: config_inc2.php in Mantis before 0.17.4 allows remote attackers to execute arbitrary code or read arbitrary files via the parameters (1) g_bottom_include_page, (2) g_top_include_page, (3) g_css_include_file, (4) g_meta_include_file, or (5) a cookie.
Key phrases: execute arbitrary code, execute arbitrary code or read arbitrary files via
CVE-2002-1115: Mantis 0.17.4a and earlier allows remote attackers to view private bugs by modifying the f_id bug ID parameter to (1) bug_update_advanced_page.php, (2) bug_update_page.php, (3) view_bug_advanced_page.php, or (4) view_bug_page.php.
Key phrases: view private bugs by modifying the f_id bug
CVE-2002-1116: The "View Bugs" page (view_all_bug_page.php) in Mantis 0.17.4a and earlier includes summaries of private bugs for users that do not have access to any projects.
CVE-2002-1117: Veritas Backup Exec 8.5 and earlier requires that the "RestrictAnonymous" registry key for Microsoft Exchange 2000 must be set to 0, which enables anonymous listing of the SAM database and shares.
Key phrases: anonymous listing
CVE-2002-1118: TNS Listener in Oracle Net Services for Oracle 9i 9.2.x and 9.0.x, and Oracle 8i 8.1.x, allows remote attackers to cause a denial of service (hang or crash) via a SERVICE_CURLOAD command.
Key phrases: denial of service (hang or crash), cause a denial of service (hang or, service_curload command
CVE-2002-1119: os._execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names, which could allow local users to execute arbitrary code via a symlink attack.
Key phrases: execute arbitrary code, execute arbitrary code via a symlink attack, predictable names
CVE-2002-1120: Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Key phrases: execute arbitrary code, execute arbitrary code via a long HTTP GET, buffer overflow
CVE-2002-1121: SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.
Key phrases: bypass content filtering, fragmented emails
CVE-2002-1122: Buffer overflow in the parsing mechanism for ISS Internet Scanner 6.2.1, when using the license banner HTTP check, allows remote attackers to execute arbitrary code via a long web server response.
Key phrases: execute arbitrary code, execute arbitrary code via a long web server, buffer overflow
CVE-2002-1123: Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.
Key phrases: execute arbitrary code, execute arbitrary code via a long request to, buffer overflow
CVE-2002-1124: Multiple buffer overflows in purity 1-16 allow local users to gain privileges and modify high scores tables.
Key phrases: gain privileges, gain privileges and modify high scores tables, buffer overflows
CVE-2002-1125: FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELEASE and earlier, including (1) asmon, (2) ascpu, (3) bubblemon, (4) wmmon, and (5) wmnet2, leave open file descriptors for /dev/mem and /dev/kmem, which allows local users to read kernel memory.
Key phrases: read kernel memory
CVE-2002-1126: Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
Key phrases: determine the next page that is being visited
CVE-2002-1127: Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long source (-s) command line parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a long source (, buffer overflow
CVE-2002-1128: Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.x allows local users to execute arbitrary code via a long MH environment variable.
Key phrases: execute arbitrary code, execute arbitrary code via a long MH environment, buffer overflow
CVE-2002-1129: Buffer overflow in dxterm allows local users to execute arbitrary code via a long -xrm argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long -xrm argument, buffer overflow
CVE-2002-1131: Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 and earlier allows remote attackers to execute script as other web users via (1) addressbook.php, (2) options.php, (3) search.php, or (4) help.php.
Key phrases: execute script as other web users via (, cross-site scripting
CVE-2002-1132: SquirrelMail 1.2.7 and earlier allows remote attackers to determine the absolute pathname of the options.php script via a malformed optpage file argument, which generates an error message when the file cannot be included in the script.
Key phrases: determine the absolute pathname of the options.php script, malformed optpage file argument
CVE-2002-1133: Encoded directory traversal vulnerability in Dino's web server 2.1 allows remote attackers to read arbitrary files via ".." (dot dot) sequences with URL-encoded (1) "/" (%2f") or (2) "\\\\" (%5c) characters.
Key phrases: read arbitrary files, read arbitrary files via ".." (, encoded directory traversal
CVE-2002-1134: Unknown vulnerability in Compaq WEBES Service Tools 2.0 through WEBES 4.0 (Service Pack 5) allows local users to read privileged files.
Key phrases: read privileged files, unknown
CVE-2002-1135: modsecurity.php 1.10 and earlier, in phpWebSite 0.8.2 and earlier, allows remote attackers to execute arbitrary PHP source code via an inc_prefix parameter that points to the malicious code.
Key phrases: execute arbitrary PHP source code, execute arbitrary PHP source code via an inc_prefix
CVE-2002-1137: Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, allows attackers to execute arbitrary code via a long SourceDB argument in a "non-SQL OLEDB data source" such as FoxPro, a variant of CAN-2002-0644.
Key phrases: execute arbitrary code, execute arbitrary code via a long SourceDB argument, buffer overflow
CVE-2002-1138: Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desktop Engine (MSDE) 2000, writes output files for scheduled jobs under its own privileges instead of the entity that launched it, which allows attackers to overwrite system files, aka "Flaw in Output File Handling for Scheduled Jobs."
Key phrases: overwrite system files, flaw in output file handling for scheduled jobs
CVE-2002-1139: The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target Path for Zipped File Decompression."
Key phrases: place an executable file in a known location, incorrect target path for zipped file decompression
CVE-2002-1140: The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service (service hang) via malformed packet fragments, aka "Improper parameter size check leading to denial of service."
Key phrases: denial of service (service hang), cause a denial of service (service hang, malformed packet fragments, improper parameter size check