yahoo-inc/cve-impacts huggingface dataset:
CVE-2002-0211: Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.
Key phrases: execute arbitrary commands, execute arbitrary commands by modifying the program before, race condition
CVE-2002-0212: The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.
Key phrases: determine the existence of valid usernames and makes, brute force
CVE-2002-0213: xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.
Key phrases: read arbitrary files, read arbitrary files via a symlink attack on
CVE-2002-0214: Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key.
Key phrases: decrypt network traffic by reading the WEP key, weak permissions
CVE-2002-0215: Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.
Key phrases: determine the full pathname of the agora.cgi file
CVE-2002-0216: userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.
Key phrases: obtain sensitive information, obtain sensitive information via a SQL injection attack, sql injection
CVE-2002-0217: Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php.
Key phrases: execute Javascript on other web clients via (, cross-site scripting (css)
CVE-2002-0218: Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.
Key phrases: execute arbitrary code, execute arbitrary code via format specifiers in a, format string
CVE-2002-0219: Buffer overflow in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument.
Key phrases: execute arbitrary code, execute arbitrary code via large command line argument, buffer overflow
CVE-2002-0220: phpsmssend.php in PhpSmsSend 1.0 allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters.
Key phrases: execute arbitrary commands, execute arbitrary commands via an SMS message containing, shell metacharacters
CVE-2002-0221: Etype Eserv 2.97 allows remote attackers to cause a denial of service (resource exhaustion) via a large number of PASV commands that consume ports 1024 through 5000, which prevents the server from accepting valid PASV.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion, pasv commands
CVE-2002-0222: Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.
Key phrases: redirect traffic to other sites (aka FTP, ftp bounce
CVE-2002-0223: Infopop UBB.Threads 5.4 and Wired Community Software WWWThreads 5.0 through 5.0.9 allows remote attackers to upload arbitrary files by using a filename that contains an accepted extension, but ends in a different extension.
Key phrases: upload arbitrary files, upload arbitrary files by using a filename that
CVE-2002-0224: The MSDTC (Microsoft Distributed Transaction Service Coordinator) for Microsoft Windows 2000, Microsoft IIS 5.0 and SQL Server 6.5 through SQL 2000 0.0 allows remote attackers to cause a denial of service (crash or hang) via malformed (random) input.
Key phrases: denial of service (crash or hang), cause a denial of service (crash or, malformed (random) input
CVE-2002-0225: tac_plus Tacacs+ daemon F4.0.4.alpha, originally maintained by Cisco, creates files from the accounting directive with world-readable and writable permissions, which allows local users to access and modify sensitive files.
Key phrases: access and modify sensitive files
CVE-2002-0226: retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.
Key phrases: request a new password on behalf of another
CVE-2002-0227: KICQ 2.0.0b1 allows remote attackers to cause a denial of service (crash) via a malformed message.
Key phrases: denial of service (crash), cause a denial of service (crash), malformed message
CVE-2002-0228: Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).
Key phrases: obtain sensitive information, use Javascript that references an ActiveX object to, activex object, spoofing
CVE-2002-0229: Safe Mode feature (safe_mode) in PHP 3.0 through 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using "LOAD DATA INFILE LOCAL" SQL statements.
Key phrases: read arbitrary files, bypass Safe Mode access restrictions, the MySQL database to bypass Safe Mode access
CVE-2002-0230: Cross-site scripting vulnerability in fom.cgi of Faq-O-Matic 2.712 allows remote attackers to execute arbitrary Javascript on other clients via the cmd parameter, which causes the script to be inserted into an error message.
Key phrases: execute arbitrary Javascript, execute arbitrary Javascript on other clients via the, cross-site scripting, error message, arbitrary javascript
CVE-2002-0231: Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname.
Key phrases: execute arbitrary code, execute arbitrary code on the client via a, buffer overflow
CVE-2002-0232: Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi.
Key phrases: read portions of arbitrary files via a .., directory traversal
CVE-2002-0233: Directory traversal vulnerability in eshare Expressions 4 Web server allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2002-0234: NetScreen ScreenOS before 2.6.1 does not support a maximum number of concurrent sessions for a system, which allows an attacker on the trusted network to cause a denial of service (resource exhaustion) via a port scan to an external network, which consumes all available connections.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion, port scan
CVE-2002-0235: Castelle FaxPress, possibly 6.3 and other versions, when configured to use the Network print queue, allows attackers to obtain the username and password by submitting an incorrect login, which causes Faxpress to leak the correct username and password in plaintext in an error event.
Key phrases: obtain the username and password, obtain the username and password by submitting an, incorrect login, leak
CVE-2002-0236: Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.
Key phrases: bypass authentication, bypass authentication via a direct HTTP request to
CVE-2002-0237: Buffer overflow in ISS BlackICE Defender 2.9 and earlier, BlackICE Agent 3.0 and 3.1, and RealSecure Server Sensor 6.0.1 and 6.5 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a flood of large ICMP ping packets.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0238: Cross-site scripting vulnerability in web administration interface for NetGear RT314 and RT311 Gateway Routers allows remote attackers to execute arbitrary script on another client via a URL that contains the script.
Key phrases: execute arbitrary script, execute arbitrary script on another client via a, cross-site scripting
CVE-2002-0239: Buffer overflow in hanterm 3.3.1 and earlier allows local users to execute arbitrary code via a long string in the (1) -fn, (2) -hfb, or (3) -hfn argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long string in, buffer overflow
CVE-2002-0240: PHP, when installed with Apache and configured to search for index.php as a default web page, allows remote attackers to obtain the full pathname of the server via the HTTP OPTIONS method, which reveals the pathname in the resulting error message.
Key phrases: obtain the full pathname of the server via
CVE-2002-0241: NDSAuth.DLL in Cisco Secure Authentication Control Server (ACS) 3.0.1 does not check the Expired or Disabled state of users in the Novell Directory Services (NDS), which could allow those users to authenticate to the server.
Key phrases: authenticate to the server
CVE-2002-0242: Cross-site scripting vulnerability in Internet Explorer 6 earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed.
Key phrases: execute arbitrary script, execute arbitrary script via an Extended HTML Form, cross-site scripting
CVE-2002-0243: Cross-site scripting vulnerability in Opera 6.0 and earlier allows remote attackers to execute arbitrary script via an Extended HTML Form, whose output from the remote server is not properly cleansed.
Key phrases: execute arbitrary script, execute arbitrary script via an Extended HTML Form, cross-site scripting
CVE-2002-0244: Directory traversal vulnerability in chroot function in AtheOS 0.3.7 allows attackers to escape the jail via a .. (dot dot) in the pathname argument to chdir.
Key phrases: escape the jail via a .. (dot, directory traversal
CVE-2002-0245: Lotus Domino server 5.0.8 with NoBanner enabled allows remote attackers to (1) determine the physical path of the server via a request for a nonexistent file with a .pl (Perl) extension, which leaks the pathname in the error message, or (2) make any request that causes an HTTP 500 error, which leaks the server's version name in the HTTP error message.
Key phrases: (1) determine the physical path of, nobanner
CVE-2002-0246: Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint.
Key phrases: gain privileges, gain privileges by modifying the LC_MESSAGE environment variable, format string
CVE-2002-0247: Buffer overflows in wmtv 0.6.5 and earlier may allow local users to gain privileges.
Key phrases: gain privileges, buffer overflows
CVE-2002-0248: wmtv 0.6.5 and earlier allows local users to modify arbitrary files via a symlink attack on a configuration file.
Key phrases: modify arbitrary files, modify arbitrary files via a symlink attack on
CVE-2002-0249: PHP for Windows, when installed on Apache 2.0.28 beta as a standalone CGI module, allows remote attackers to obtain the physical path of the php.exe via a request with malformed arguments such as /123, which leaks the pathname in the error message.
Key phrases: obtain the physical path of the php.exe via, malformed arguments
CVE-2002-0250: Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password.
Key phrases: bypass authentication, bypass authentication via a direct HTTP request to, change the switch's configuration and modify the, direct http request
CVE-2002-0251: Buffer overflow in licq 1.0.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string of format string characters such as "%d".
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0252: Buffer overflow in Apple QuickTime Player 5.01 and 5.02 allows remote web servers to execute arbitrary code via a response containing a long Content-Type MIME header.
Key phrases: execute arbitrary code, execute arbitrary code via a response containing a, buffer overflow
CVE-2002-0253: PHP, when not configured with the "display_errors = Off" setting in php.ini, allows remote attackers to obtain the physical path for an include file via a trailing slash in a request to a directly accessible PHP program, which modifies the base path, causes the include directive to fail, and produces an error message that contains the path.
Key phrases: obtain the physical path for an include file
CVE-2002-0254: ICQ 2001b Build 3659 allows remote attackers to cause a denial of service (crash) via a malformed picture that contains large height and width values, which causes the crash when viewed in Userdetails.
Key phrases: denial of service (crash), cause a denial of service (crash), malformed picture
CVE-2002-0255: The default configuration of Arescom NetDSL 800 does not require authentication, which allows remote attackers to cause a denial of service or reconfigure the router.
Key phrases: cause a denial of service or reconfigure the
CVE-2002-0256: The telnet port in Arescom NetDSL 1000 router allows remote attackers to cause a denial of service via a series of connections with long strings, which causes a large number of login failures and causes the telnet service to stop.
Key phrases: cause a denial of service via a series, stop
CVE-2002-0257: Cross-site scripting vulnerability in auction.pl of MakeBid Auction Deluxe 3.30 allows remote attackers to obtain information from other users via the form fields (1) TITLE, (2) DESCTIT, (3) DESC, (4) searchstring, (5) ALIAS, (6) EMAIL, (7) ADDRESS1, (8) ADDRESS2, (9) ADDRESS3, (10) PHONE1, (11) PHONE2, (12) PHONE3, or (13) PHONE4.
Key phrases: obtain information, obtain information from other users via the form, cross-site scripting
CVE-2002-0258: Merak Mail IceWarp Web Mail uses a static identifier as a user session ID that does not change across sessions, which could allow remote attackers with access to the ID to gain privileges as that user, e.g. by extracting the ID from the user's answer or forward URLs.
Key phrases: gain privileges, the ID to gain privileges as that user, static identifier
CVE-2002-0259: InstantServers MiniPortal 1.1.5 and earlier stores sensitive login and account data in plaintext in (1) .pwd files in the miniportal/apache directory, or (2) mplog.txt, which could allow local users to gain privileges.
Key phrases: gain privileges, local users
CVE-2002-0260: Buffer overflow in InstantServers MiniPortal 1.1.5 and earlier allows remote attackers to execute arbitrary code via a long login name, which is not properly handled by the logging utility.
Key phrases: execute arbitrary code, execute arbitrary code via a long login name, buffer overflow
CVE-2002-0261: Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to read arbitrary files via a ... (modified dot dot) in the GET command.
Key phrases: read arbitrary files, read arbitrary files via a ... (modified, directory traversal
CVE-2002-0262: Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2002-0263: Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header to (1) ezboard.cgi, (2) ezman.cgi, or (3) ezadmin.cgi.
Key phrases: execute arbitrary code, execute arbitrary code via a long boundary value, buffer overflow
CVE-2002-0264: PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows attackers with access to the file to gain privileges.
Key phrases: gain privileges, the file to gain privileges, plaintext
CVE-2002-0265: Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file.
Key phrases: gain privileges, gain privileges by modifying the file, world-writable permissions
CVE-2002-0266: Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which generates an error message that includes the full pathname.
Key phrases: obtain the full path of the web root, nonexistent file
CVE-2002-0267: preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a linebreak in the "theme" field followed by the Status::admin command, which causes the Status line to be entered into the password file.
Key phrases: gain administrative privileges, gain administrative privileges via a linebreak in the
CVE-2002-0268: Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-DEL and running a "Browse" function, which runs Explorer with SYSTEM privileges.
Key phrases: gain administrative privileges, the system to gain administrative privileges by using
CVE-2002-0269: Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks.
Key phrases: execute arbitrary script, execute arbitrary script in documents that the user, cross-site scripting
CVE-2002-0270: Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attackers to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks.
Key phrases: execute arbitrary script, execute arbitrary script in documents that the user, cross-site scripting
CVE-2002-0271: Runtime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on temporary files.
Key phrases: modify files of other users via a symlink
CVE-2002-0272: Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command line option, (2) an HTTP request, or (3) an FTP request.
Key phrases: execute arbitrary code, execute arbitrary code via a long URL to, buffer overflows
CVE-2002-0273: Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter.
Key phrases: execute arbitrary code, execute arbitrary code via a long item parameter, buffer overflow
CVE-2002-0274: Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C (configuration file) and other command line arguments.
Key phrases: gain privileges, gain privileges via a buffer overflow in long
CVE-2002-0275: Falcon web server 2.0.0.1020 and earlier allows remote attackers to bypass authentication and read restricted files via an extra / (slash) in the requested URL.
Key phrases: bypass authentication, bypass authentication and read restricted files via an, extra (slash)
CVE-2002-0276: Buffer overflow in various decoders in Ettercap 0.6.3.1 and earlier, when running on networks with an MTU greater than 2000, allows remote attackers to execute arbitrary code via large packets.
Key phrases: execute arbitrary code, execute arbitrary code via large packets, buffer overflow
CVE-2002-0277: Add2it Mailman Free 1.73 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the list parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2002-0278: Directory traversal vulnerability in Add2it Mailman Free 1.73 and earlier allows remote attackers to modify arbitrary files via a .. (dot dot) in the list parameter.
Key phrases: modify arbitrary files, modify arbitrary files via a .. (dot, directory traversal
CVE-2002-0279: The kernel in HP-UX 11.11 does not properly provide arguments for setrlimit, which could allow local attackers to cause a denial of service (kernel panic) and possibly gain privileges.
Key phrases: denial of service (kernel panic), gain privileges, cause a denial of service (kernel panic
CVE-2002-0280: Buffer overflow in CodeBlue 4 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via a long string in an SMTP reply.
Key phrases: execute arbitrary code, execute arbitrary code via a long string in, buffer overflow
CVE-2002-0281: Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php.
Key phrases: gain privileges, gain privileges of other portal users by providing, cross-site scripting
CVE-2002-0282: DCP-Portal 3.7 through 4.5 allows remote attackers to obtain the physical path of the server via (1) a direct request to add_user.php, or via an invalid new_language parameter in (2) contents.php, (3) categories.php, or (4) files.php, which leaks the path in an error message.
Key phrases: obtain the physical path of the server via, invalid new_language parameter
CVE-2002-0283: Windows XP with port 445 open allows remote attackers to cause a denial of service (CPU consumption) via a flood of TCP SYN packets containing possibly malformed data.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, port, cpu consumption, malformed data
CVE-2002-0284: Winamp 2.78 and 2.77, when opening a wma file that requires a license, sends the full path of the Temporary Internet Files directory to the web page that is processing the license, which could allow malicious web servers to obtain the pathname.
Key phrases: obtain the pathname.
CVE-2002-0285: Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carriage return/line feed combination (CR/LF), which could allow remote attackers to bypass virus protection and or other filtering mechanisms via a mail message with headers that only contain the CR, which causes Outlook to create separate headers.
Key phrases: bypass virus protection, bypass virus protection and or other filtering mechanisms
CVE-2002-0286: The GetPassword function in function.php of SiteNews 0.10 and 0.11 allows remote attackers to gain privileges and add users by providing a non-existent user name and the MD5 checksum for an empty password to add_user.php, which causes GetPassword to produce and compare a blank password for the non-existent user.
Key phrases: gain privileges, gain privileges and add users by providing a, non-existent user name, empty password, blank password
CVE-2002-0287: pforum 1.14 and earlier does not explicitly enable PHP magic quotes, which allows remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default.
Key phrases: bypass authentication, gain administrator privileges, bypass authentication and gain administrator privileges via an, sql injection
CVE-2002-0288: Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request.
Key phrases: read arbitrary files, read arbitrary files via a ... (triple, directory traversal
CVE-2002-0289: Buffer overflow in Phusion web server 1.0 allows remote attackers to cause a denial of service and execute arbitrary code via a long HTTP request.
Key phrases: execute arbitrary code, cause a denial of service and execute arbitrary, buffer overflow
CVE-2002-0290: Buffer overflow in Netwin WebNews CGI program 1.1, Webnews.exe, allows remote attackers to execute arbitrary code via a long group argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long group argument, buffer overflow
CVE-2002-0291: Dino's Webserver 1.2 allows remote attackers to cause a denial of service (CPU consumption) and possibly execute arbitrary code via several large HTTP requests within a short time.
Key phrases: execute arbitrary code, denial of service (CPU consumption), cause a denial of service (CPU consumption
CVE-2002-0292: Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.
Key phrases: steal cookies and authentication information from other users, cross-site scripting
CVE-2002-0293: FTP service in Alcatel OmniPCX 4400 allows the "halt" user to gain root privileges by modifying root's .profile file.
Key phrases: gain root privileges, gain root privileges by modifying root's .profile, ftp service
CVE-2002-0294: Alcatel 4400 installs the /chetc/shutdown command with setgid privileges, which allows many different local users to shut down the system.
Key phrases: shut down the system, setgid privileges
CVE-2002-0295: Alcatel OmniPCX 4400 installs files with world-writable permissions, which allows local users to reconfigure the system and possibly gain privileges.
Key phrases: gain privileges, reconfigure the system and possibly gain privileges, world-writable permissions
CVE-2002-0296: The installation of Tarantella Enterprise 3 allows local users to overwrite arbitrary files via a symlink attack on the "spinning" temporary file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2002-0297: Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP request.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-0298: ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character.
Key phrases: denial of service (crash), cause a denial of service (crash), missing uri
CVE-2002-0299: CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension (such as .BAT), which is executed during a scan.
Key phrases: execute arbitrary code, execute arbitrary code via a .RVP file that, cnet catchup
CVE-2002-0300: gnujsp 1.0.0 and 1.0.1 allows remote attackers to list directories, read source code of certain scripts, and bypass access restrictions by directly requesting the target file from the gnujsp servlet, which does not work around a limitation of JServ and does not process the requested file.
Key phrases: bypass access restrictions, list directories
CVE-2002-0301: Citrix NFuse 1.6 allows remote attackers to bypass authentication and obtain sensitive information by directly calling launch.asp with invalid NFUSE_USER and NFUSE_PASSWORD parameters.
Key phrases: bypass authentication, obtain sensitive information, bypass authentication and obtain sensitive information by directly
CVE-2002-0302: The Notify daemon for Symantec Enterprise Firewall (SEF) 6.5.x drops large alerts when SNMP is used as the transport, which could prevent some alerts from being sent in the event of an attack.
CVE-2002-0303: GroupWise 6, when using LDAP authentication and when Post Office has a blank username and password, allows attackers to gain privileges of other users by logging in without a password.
Key phrases: gain privileges, gain privileges of other users by logging in, blank username and password
CVE-2002-0304: Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.
Key phrases: read password-protected files via a /./
CVE-2002-0305: Zero One Tech (ZOT) P100s print server does not properly disable the SNMP service or change the default password, which could leave the server open to attack without the administrator's knowledge.
Key phrases: default password
CVE-2002-0306: ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the p (plugin) parameter.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2002-0307: Directory traversal vulnerability in ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to determine the existence of arbitrary files or execute any Perl program on the system via a .. (dot dot) in the p parameter, which reads the target file and attempts to execute the line using Perl's eval function.
Key phrases: determine the existence of arbitrary files or execute, directory traversal
CVE-2002-0308: admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments.
Key phrases: bypass authentication, gain privileges, bypass authentication and gain privileges via a SQL, sql injection
CVE-2002-0309: SMTP proxy in Symantec Enterprise Firewall (SEF) 6.5.x includes the firewall's physical interface name and address in an SMTP protocol exchange when NAT translation is made to an address other than the firewall, which could allow remote attackers to determine certain firewall configuration information.
Key phrases: determine certain firewall configuration information
CVE-2002-0310: Netwin WebNews 1.1k CGI program includes several default usernames and cleartext passwords that cannot be deleted by the administrator, which allows remote attackers to gain privileges via the username/password combinations (1) testweb/newstest, (2) alwn3845/imaptest, (3) alwi3845/wtest3452, or (4) testweb2/wtest4879.
Key phrases: gain privileges, gain privileges via the username/password combinations, default usernames, cleartext passwords
CVE-2002-0311: Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) in scoadminreg.cgi or (2) service_action.cgi.
Key phrases: gain root privileges, gain root privileges via shell metacharacters in the, vulnerability in webtop
CVE-2002-0312: Directory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2002-0313: Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long URL.
Key phrases: execute arbitrary code, cause a denial of service, buffer overflow
CVE-2002-0314: fasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to cause a denial of service (memory exhaustion) via a series of client-to-client messages, which pops up new windows per message.
Key phrases: denial of service (memory exhaustion), cause a denial of service (memory exhaustion, fasttrack
CVE-2002-0315: fasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other users by modifying the username and network information in the message header.
Key phrases: spoof other users by modifying the username and, fasttrack, spoofing
CVE-2002-0316: Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag.
Key phrases: execute script as other XMB users by inserting, cross-site scripting
CVE-2002-0317: Gator ActiveX component (IEGator.dll) 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter.
Key phrases: install arbitrary software, install arbitrary software by specifying a Trojan Gator
CVE-2002-0318: FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets.
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption
CVE-2002-0319: Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies from other users via Javascript in a username.
Key phrases: execute script and steal cookies from other users, cross-site scripting
CVE-2002-0320: Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-0321: Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks.
Key phrases: denial of service (flooding), spoof other users by modifying the username and, spoofing
CVE-2002-0322: Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing.
Key phrases: gain privileges, gain privileges of other users via sniffing, cleartext
CVE-2002-0323: comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL.
Key phrases: read arbitrary files, read arbitrary files by specifying the target file
CVE-2002-0324: Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a "Clear And Exit" action.
Key phrases: gain administrative privileges, read a cleartext password and gain administrative privileges
CVE-2002-0325: Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.
Key phrases: read arbitrary files, read arbitrary files via a ... (modified, directory traversal
CVE-2002-0326: Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains Javascript.
Key phrases: execute arbitrary script, execute arbitrary script and possibly additional commands via, cross-site scripting
CVE-2002-0327: Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program.
Key phrases: gain root privileges, gain root privileges via a long tty argument, buffer overflow
CVE-2002-0328: Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag.
Key phrases: execute arbitrary script, execute arbitrary script as other Ikonboard users and, cross-site scripting, steal cookie
CVE-2002-0329: Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.
Key phrases: execute arbitrary script, execute arbitrary script as other Forums 2000 users, cross-site scripting
CVE-2002-0330: Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in the IMG tag.
Key phrases: execute arbitrary script, execute arbitrary script and steal cookies via Javascript, cross-site scripting
CVE-2002-0331: Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal
CVE-2002-0332: Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary code via (1) a long DNS hostname that is determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request.
Key phrases: execute arbitrary code, execute arbitrary code via (1) a, buffer overflows
CVE-2002-0333: Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.
Key phrases: read files with short names, directory traversal
CVE-2002-0334: xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file.
Key phrases: modify files via a symlink attack on the
CVE-2002-0335: Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request.
Key phrases: execute arbitrary code, cause a denial of service, buffer overflow
CVE-2002-0336: Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / (slash), * (wildcard), and .. characters.
Key phrases: execute arbitrary code, cause a denial of service, buffer overflow
CVE-2002-0337: RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files.
Key phrases: denial of service (CPU utilization), cause a denial of service (CPU utilization, malformed files
CVE-2002-0338: The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name.
Key phrases: denial of service (crash), cause a denial of service (crash), ms-dos device name
CVE-2002-0339: Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length.
CVE-2002-0340: Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files containing .wmf content.
CVE-2002-0341: GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter.
Key phrases: determine the full pathname of the web server, invalid htmlver parameter
CVE-2002-0342: Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-0343: Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords.
Key phrases: gain privileges, the bookmarks file to gain privileges by extracting
CVE-2002-0344: Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.
Key phrases: impersonate the LiveUpdate server, cleartext
CVE-2002-0345: Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\\\\params registry key, which could allow an attacker to gain privileges.
Key phrases: gain privileges, plaintext
CVE-2002-0346: Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.
Key phrases: execute arbitrary script, execute arbitrary script as other Cobalt users via, cross-site scripting
CVE-2002-0347: Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.
Key phrases: read password-protected files, directory traversal
CVE-2002-0348: service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
Key phrases: execute arbitrary code, cause a denial of service, long service argument
CVE-2002-0349: Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions.
Key phrases: bypass access restrictions, the machine to hide activities or bypass access, physical access
CVE-2002-0350: HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service.
Key phrases: cause a denial of service via a port, port scan
CVE-2002-0351: Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denial of service and possibly execute arbitrary code.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflows
CVE-2002-0352: Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication.
Key phrases: determine the email addresses of the 10 most, direct http request
CVE-2002-0353: The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields.
Key phrases: denial of service (crash), cause a denial of service (crash), malformed packet, zero-length fields
CVE-2002-0354: The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property.
Key phrases: read arbitrary files, read arbitrary files and list directories on a
CVE-2002-0355: netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions.
Key phrases: determine the existence of files on the system
CVE-2002-0356: Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.
Key phrases: gain root privileges, gain root privileges by overwriting critical system files
CVE-2002-0357: Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.
Key phrases: gain root privileges, unknown
CVE-2002-0358: MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges.
Key phrases: gain privileges, force the program to dump core via certain, read sensitive data or gain privileges
CVE-2002-0359: xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges.
Key phrases: gain root privileges, call dangerous RPC functions, weak authentication
CVE-2002-0360: Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.
Key phrases: execute arbitrary code, execute arbitrary code via a long filename argument, buffer overflow
CVE-2002-0362: Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711.
Key phrases: execute arbitrary code, execute arbitrary code via a long AddExternalApp request, buffer overflow
CVE-2002-0363: ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.
Key phrases: execute arbitrary commands, execute arbitrary commands by using .locksafe or .setsafe
CVE-2002-0364: Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."
Key phrases: execute arbitrary code, execute arbitrary code via the processing of HTR, buffer overflow, heap overrun, web server compromise
CVE-2002-0366: Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.
Key phrases: execute arbitrary code, execute arbitrary code by modifying the rasphone.pbk file, buffer overflow
CVE-2002-0367: smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.
Key phrases: gain administrator or SYSTEM privileges, gain administrator or SYSTEM privileges by duplicating a
CVE-2002-0368: The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."
Key phrases: denial of service (CPU consumption), cause a denial of service (CPU consumption, cpu consumption, malformed rfc message attribute, malformed mail attribute, exhaust cpu resources