yahoo-inc/cve-impacts huggingface dataset:
CVE-2002-1482: SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.
Key phrases: gain administrative privileges, gain administrative privileges via SQL code in the, sql injection
CVE-2002-1483: db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot).
Key phrases: read arbitrary files, read arbitrary files via an HTTP request whose
CVE-2002-1484: DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.
Key phrases: use DB4Web as a proxy and attempt TCP
CVE-2002-1485: The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service (crash) via certain strings such as "P > O < C".
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-1486: Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long "raw 221" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflows
CVE-2002-1487: The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-1488: The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) via a PART message with (1) a missing channel or (2) a channel that the Trillian user is not in.
Key phrases: denial of service (crash), cause a denial of service (crash), missing channel
CVE-2002-1489: Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.
Key phrases: execute arbitrary code, execute arbitrary code via (1) an, buffer overflow
CVE-2002-1490: NetBSD 1.4 through 1.6 beta allows local users to cause a denial of service (kernel panic) via a series of calls to the TIOCSCTTY ioctl, which causes an integer overflow in a structure counter and sets the counter to zero, which frees memory that is still in use by other processes.
Key phrases: denial of service (kernel panic), cause a denial of service (kernel panic, integer overflow
CVE-2002-1491: The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving "Default Connection" settings, which could allow local users to gain privileges.
Key phrases: gain privileges, plaintext
CVE-2002-1492: Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel.
Key phrases: gain root privileges, gain root privileges via (1) close_tunnel, buffer overflows
CVE-2002-1493: Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag.
Key phrases: inject arbitrary script, inject arbitrary script via (1) STYLE, cross-site scripting (xss)
CVE-2002-1494: Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message.
Key phrases: insert arbitrary HTML or script, insert arbitrary HTML or script by inserting the, cross-site scripting (xss), arbitrary html
CVE-2002-1495: Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via (1) attached file names in the Read Mail feature, (2) text/html mails that are displayed in a pop-up window, and (3) certain malicious attributes within otherwise safe tags, such as onMouseOver.
Key phrases: insert arbitrary script or HTML, insert arbitrary script or HTML via (1, cross-site scripting (xss)
CVE-2002-1496: Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header.
Key phrases: execute arbitrary code, execute arbitrary code via a negative value in, heap-based buffer overflow, heap based buffer overflow
CVE-2002-1497: Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a "404 Not Found" response.
Key phrases: insert arbitrary HTML, insert arbitrary HTML into a "404 Not, cross-site scripting (xss), arbitrary html
CVE-2002-1498: Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL containing .. sequences with "/" or "\\\\" characters.
Key phrases: read arbitrary files, read arbitrary files via a URL containing .., directory traversal
CVE-2002-1499: Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp.
Key phrases: perform unauthorized database actions via (1), sql injection
CVE-2002-1500: Buffer overflow in (1) mrinfo, (2) mtrace, and (3) pppd in NetBSD 1.4.x through 1.6 allows local users to gain privileges by executing the programs after filling the file descriptor tables, which produces file descriptors larger than FD_SETSIZE, which are not checked by FD_SET().
Key phrases: gain privileges, gain privileges by executing the programs after filling, buffer overflow
CVE-2002-1501: The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to cause a denial of service (crash) via multiple port scans to ports 15077 and 15078.
Key phrases: denial of service (crash), cause a denial of service (crash), mps functionality, multiple port scans
CVE-2002-1502: Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink from the, symbolic link
CVE-2002-1503: Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd, (2) afdcmd, (3) afd_ctrl, (4) init_afd, (5) mafd, (6) mon_ctrl, (7) show_olog, or (8) udc.
Key phrases: gain privileges, gain privileges via a long MON_WORK_DIR environment variable, buffer overflow
CVE-2002-1504: Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via "..\\\\" (dot-dot backslash) sequences in a URL.
Key phrases: read arbitrary files, read arbitrary files via "..\\\\", directory traversal
CVE-2002-1505: SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter.
Key phrases: gain privileges, modify the database and possibly gain privileges via, sql injection
CVE-2002-1506: Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.
Key phrases: execute arbitrary code, execute arbitrary code via a long LINUXCONF_LANG environment, buffer overflow
CVE-2002-1507: Unreal Tournament 2003 (ut2003) clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777.
Key phrases: cause a denial of service via malformed messages
CVE-2002-1508: slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a race condition during
CVE-2002-1509: A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.
Key phrases: read or modify the new user's incoming
CVE-2002-1510: xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist.
Key phrases: allows arbitrary attackers, connect to the X server if the xdm
CVE-2002-1511: The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.
Key phrases: weak cookies
CVE-2002-1512: xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file.
Key phrases: overwrite arbitrary files, gain root privileges, overwrite arbitrary files and gain root privileges via, symlink
CVE-2002-1513: The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.
Key phrases: truncate arbitrary files, BYPASS privileges, truncate arbitrary files via the -logfile command line
CVE-2002-1514: gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "isc_init1.X" temporary file, as demonstrated by modifying the xinetdbd file.
Key phrases: gain privileges, overwrite files and gain privileges via a symlink
CVE-2002-1515: Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2002-1516: rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack
CVE-2002-1517: fsr_efs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file.
Key phrases: conduct unauthorized file activities via a symlink attack
CVE-2002-1518: mv in IRIX 6.5 creates a directory with world-writable permissions while moving a directory, which could allow local users to modify files and directories.
Key phrases: modify files and directories, world-writable permissions
CVE-2002-1519: Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, format string
CVE-2002-1520: The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.
Key phrases: access CLI with administrator privileges, ssh connection
CVE-2002-1521: Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.
Key phrases: gain privileges, plaintext
CVE-2002-1522: Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.
Key phrases: execute arbitrary code, cause a denial of service and possibly execute, buffer overflow
CVE-2002-1523: Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\\\\ (dot-dot backslash) sequences.
Key phrases: read arbitrary files, read arbitrary files via (1) .., directory traversal
CVE-2002-1524: Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.
Key phrases: execute arbitrary code, execute arbitrary code via a skin file (, buffer overflow
CVE-2002-1525: Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017.
Key phrases: read arbitrary files, read arbitrary files via a .. (dot, directory traversal, dot dot attack
CVE-2002-1526: Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field.
Key phrases: inject arbitrary HTML or script, inject arbitrary HTML or script via the email, cross-site scripting (xss), arbitrary html
CVE-2002-1527: emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message.
Key phrases: determine the full pathname for emumail.cgi via a, malformed string containing script
CVE-2002-1528: MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter.
Key phrases: obtain the source code of scripts via the mask parameter
CVE-2002-1529: Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.
Key phrases: insert arbitrary script or HTML, insert arbitrary script or HTML via the Reason, cross-site scripting (xss)
CVE-2002-1530: The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.
Key phrases: obtain usernames and plaintext passwords, obtain usernames and plaintext passwords via a request
CVE-2002-1531: The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.
Key phrases: denial of service (crash), cause a denial of service (crash), content-length parameter
CVE-2002-1532: The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminating /r/n/r/n (CRLF) sequence, which causes the interface to wait for the sequence and blocks other users from accessing it.
Key phrases: denial of service (resource exhaustion), cause a denial of service (resource exhaustion
CVE-2002-1533: Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
Key phrases: insert arbitrary HTML or script, insert arbitrary HTML or script via an HTTP, cross-site scripting (xss), arbitrary html
CVE-2002-1534: Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.
Key phrases: read arbitrary files, read arbitrary files via XML script in a
CVE-2002-1535: Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present.
Key phrases: identify IP addresses of hosts on the internal
CVE-2002-1536: Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables in hpled.pl.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in (
CVE-2002-1537: admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as "u".
Key phrases: gain administrator privileges, gain administrator privileges by directly calling admin_ug_auth.php with
CVE-2002-1538: Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.
Key phrases: read the reports of other users by inferring, easily predictable
CVE-2002-1539: Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments.
Key phrases: cause a denial of service via long (, buffer overflow
CVE-2002-1540: The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32.
Key phrases: gain privileges, gain privileges by using certain features of winhlp32
CVE-2002-1541: BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).
Key phrases: bypass password protections, bypass password protections for directories and files via, badblue
CVE-2002-1542: SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-1543: Buffer overflow in trek on NetBSD 1.5 through 1.5.3 allows local users to gain privileges via long keyboard input.
Key phrases: gain privileges, gain privileges via long keyboard input, buffer overflow
CVE-2002-1544: Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.
Key phrases: modify arbitrary files, read or modify arbitrary files via .. (, directory traversal
CVE-2002-1545: CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.
Key phrases: obtain the absolute pathname of the FTP root
CVE-2002-1546: BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a "/./" sequence.
Key phrases: bypass password protections, bypass password protections for files and directories via
CVE-2002-1547: Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144.
Key phrases: cause a denial of service via a malformed, malformed ssh packet
CVE-2002-1548: Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to "string handling around how the executable map is called."
Key phrases: execute arbitrary commands, execute arbitrary commands as root, unknown
CVE-2002-1549: Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.
Key phrases: execute arbitrary code, execute arbitrary code via a long HTTP GET, buffer overflow
CVE-2002-1550: dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via a symlink attack on
CVE-2002-1551: Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.
Key phrases: execute arbitrary code, cause a denial of service or execute arbitrary, buffer overflow
CVE-2002-1552: Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager.
Key phrases: gain inappropriate permissions, gain inappropriate permissions when logging in from Remote, expired passwords
CVE-2002-1553: Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.
Key phrases: modify the system configuration and delete files by, ftp connection
CVE-2002-1554: Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.
Key phrases: gain privileges, gain privileges by obtaining the passwords from the, cleartext
CVE-2002-1555: Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information.
Key phrases: obtain sensitive information, snmp community string
CVE-2002-1556: Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR).
Key phrases: denial of service (reset), cause a denial of service (reset), corba interoperable object reference (ior)
CVE-2002-1557: Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.
Key phrases: denial of service (reset to TCC, TCC+, TCCi or XTC), cause a denial of service (reset to, malformed http request
CVE-2002-1558: Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.
Key phrases: gain privileges, gain privileges by connecting to the account via
CVE-2002-1559: Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.
Key phrases: read arbitrary files, read arbitrary files via (1) C, directory traversal
CVE-2002-1560: index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.
Key phrases: bypass authentication, gain administrative privileges, bypass authentication and gain administrative privileges by setting, login parameter
CVE-2002-1561: The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.
Key phrases: denial of service (disabled RPC service), cause a denial of service (disabled RPC, null pointer dereference
CVE-2002-1562: Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) sequences in the Host: header.
Key phrases: read arbitrary files, read arbitrary files via .. (dot dot, directory traversal
CVE-2002-1563: stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter.
Key phrases: denial of service (crash), cause a denial of service (crash), sigchld signal handler race conditions
CVE-2002-1564: Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the "Script within Cookies Reading Cookies" vulnerability.
Key phrases: steal potentially sensitive information from cookies via a, script within cookies reading cookies
CVE-2002-1565: Buffer overflow in url_filename function for wget 1.8.1 allows attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long URL.
Key phrases: execute arbitrary code, denial of service (segmentation fault), cause a denial of service (segmentation fault, buffer overflow
CVE-2002-1566: netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
Key phrases: denial of service (crash), cause a denial of service (crash)
CVE-2002-1567: Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by a request to a .jsp file whose name contains the script.
Key phrases: execute arbitrary web script, execute arbitrary web script and steal cookies via, cross-site scripting (xss)
CVE-2002-1568: OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c.
Key phrases: denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-1569: gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2002-1570: Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.
Key phrases: execute arbitrary code, execute arbitrary code via multiple getnextrequest PDU messages, heap-based buffer overflow, heap based buffer overflow
CVE-2002-1571: The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.
Key phrases: information leak
CVE-2002-1572: Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors.
Key phrases: signed integer overflow, unknown impact
CVE-2002-1573: Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling."
Key phrases: unspecified, unknown impact, unspecified vulnerability
CVE-2002-1574: Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.
Key phrases: buffer overflow, unknown impact
CVE-2002-1575: cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as "required-subject," which can be used to modify the CC, BCC, and other header fields in the generated email message.
Key phrases: use cgiemail as a spam proxy via CRLF, crlf injection
CVE-2002-1576: lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.
Key phrases: gain privileges, gain privileges with a malicious lserversrv that is, symlink
CVE-2002-1577: SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.
Key phrases: gain privileges, gain privileges via the (1) SAP, default users and passwords
CVE-2002-1578: The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.
Key phrases: obtain arbitrary, sensitive SAP data, not password-protected
CVE-2002-1579: SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an "unknown connection data" error.
Key phrases: denial of service (crash), cause a denial of service (crash), high-numbered port
CVE-2002-1580: Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.
Key phrases: execute arbitrary code, execute arbitrary code via a large length value, integer overflow, buffer overflow
CVE-2002-1581: Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.
Key phrases: view arbitrary files, view arbitrary files via .. (dot dot, directory traversal
CVE-2002-1582: compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.
Key phrases: execute arbitrary commands, execute arbitrary commands via shell metacharacters in the
CVE-2002-1583: Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.
Key phrases: execute arbitrary code, execute arbitrary code via a long username that, buffer overflow
CVE-2002-1584: Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges.
Key phrases: gain privileges, unknown
CVE-2002-1585: Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets that cause some network interfaces to stop responding to TCP traffic.
Key phrases: cause a denial of service via certain packets, unknown
CVE-2002-1586: Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.
Key phrases: denial of service (kernel panic), cause a denial of service (kernel panic, null dereference
CVE-2002-1587: The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application that uses libthread by causing the application to wait for a certain mutex.
Key phrases: denial of service (hang), cause a denial of service (hang), mutex
CVE-2002-1588: Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment.
Key phrases: denial of service (mailtool segmentation violation and crash), cause a denial of service (mailtool segmentation, malformed mail attachment
CVE-2002-1589: Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags kernel parameter, allows local users to cause a denial of service (system panic).
Key phrases: denial of service (system panic), cause a denial of service (system panic
CVE-2002-1590: The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service.
Key phrases: gain root privileges, gain root privileges or cause a denial of, group write permissions, denial of service
CVE-2002-1591: AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.
Key phrases: bypass intended access restrictions, code
CVE-2002-1592: The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.
Key phrases: obtain sensitive information
CVE-2002-1593: mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.
Key phrases: denial of service (CPU consumption), kill a child process via a null dereference, cpu consumption
CVE-2002-1594: Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument.
Key phrases: gain privileges, gain privileges via a long command line argument, buffer overflow
CVE-2002-1595: Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization.
Key phrases: read configuration files without authorization
CVE-2002-1596: Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with large headers.
Key phrases: denial of service (router crash), cause a denial of service (router crash, large headers
CVE-2002-1597: Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragmented packet to the Gigabit interface.
Key phrases: denial of service (halt), cause a denial of service (halt), fragmented packet
CVE-2002-1598: Buffer overflows in Computer Associates MLink (CA-MLink) 6.5 and earlier may allow local users to execute arbitrary code via long command line arguments to (1) mlclear or (2) mllock.
Key phrases: execute arbitrary code, execute arbitrary code via long command line arguments, buffer overflows
CVE-2002-1599: DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.
Key phrases: bypass content filtering, bypass content filtering rules via hex-encoded, hex-encoded urls
CVE-2002-1600: Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter.
Key phrases: overwrite arbitrary files, overwrite arbitrary files via the category parameter, directory traversal
CVE-2002-1601: The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page.
Key phrases: gain privileges, run with higher privileges and remote attackers to
CVE-2002-1602: Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2002-1603: GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \\\\, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.
Key phrases: obtain the source code of ASP files via, unparsed
CVE-2002-1604: Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.
Key phrases: execute arbitrary code, execute arbitrary code via a long NLSPATH environment, buffer overflows
CVE-2002-1605: Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.
Key phrases: execute arbitrary code, execute arbitrary code via a long _XKB_CHARSET, buffer overflow
CVE-2002-1606: Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.
Key phrases: gain privileges, gain privileges via (1) lpc, buffer overflows
CVE-2002-1607: Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2002-1608: Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2002-1609: Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-2002-1610: Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.
Key phrases: cause a denial of service, unknown
CVE-2002-1611: Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-2002-1612: Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-2002-1613: Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.
Key phrases: gain privileges, buffer overflow
CVE-2002-1614: Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.
Key phrases: execute arbitrary code, execute arbitrary code via a long argument to, buffer overflow
CVE-2002-1615: Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.
Key phrases: execute arbitrary code, execute arbitrary code via (1) msgchk, buffer overflows
CVE-2002-1616: Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.
Key phrases: gain root privileges, gain root privileges via (1) su, buffer overflows
CVE-2002-1617: Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.
Key phrases: execute arbitrary code, execute arbitrary code via (1) a, buffer overflows
CVE-2002-1618: JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.
Key phrases: bypass intended restrictions, bypass intended restrictions on filesystems, sticky bit functionality
CVE-2002-1619: Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).
Key phrases: denial of service (crash and core dump), cause a denial of service (crash and, buffer overflow
CVE-2002-1620: Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection.
Key phrases: read arbitrary files, read arbitrary files from a file collection, unknown
CVE-2002-1621: Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.
Key phrases: execute arbitrary code, buffer overflow
CVE-2002-1622: Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a "variable data type."
Key phrases: execute arbitrary code, buffer overflow
CVE-2002-1623: The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by (1) monitoring responses before the password is supplied or (2) sniffing, as originally reported for FireWall-1 SecuRemote.
Key phrases: determine valid usernames by (1) monitoring, sniffing
CVE-2002-1624: Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.
Key phrases: execute arbitrary code, denial of service (crash), cause a denial of service (crash), buffer overflow
CVE-2002-1625: Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.
Key phrases: denial of service (bandwidth, resource, and CPU consumption), cause a denial of service (bandwidth, cpu consumption
CVE-2002-1626: Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL.
Key phrases: write arbitrary files, write arbitrary files via .. (dot dot, directory traversal
CVE-2002-1627: Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the quiz parameter.
Key phrases: write arbitrary files, write arbitrary files via .. (dot dot, directory traversal
CVE-2002-1628: Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the type parameter.
Key phrases: write arbitrary files, write arbitrary files via .. (dot dot, directory traversal
CVE-2002-1629: Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.
Key phrases: gain administrative privileges, gain administrative privileges via Telnet or HTTP, null password
CVE-2002-1630: The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails.
Key phrases: send arbitrary emails
CVE-2002-1631: SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.
Key phrases: execute arbitrary code, execute arbitrary code via the sql parameter, sql injection
CVE-2002-1632: Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.
Key phrases: obtain environment variables and other sensitive information, obtain environment variables and other sensitive information via
CVE-2002-1633: Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.
Key phrases: execute arbitrary code, execute arbitrary code via long command line arguments, buffer overflows
CVE-2002-1634: Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl.
Key phrases: obtain sensitive information, obtain sensitive information via (1) ndsobj.nlm, allfield.jse, websinfo.bas, ndslogin.pl
CVE-2002-1635: The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.
Key phrases: read the source code of arbitrary CGI files, location alias
CVE-2002-1636: Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via the, cross-site scripting (xss)
CVE-2002-1637: Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.
Key phrases: gain privileges
CVE-2002-1639: Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to "version" or "host".
Key phrases: obtain sensitive information, obtain sensitive information via a request to the
CVE-2002-1640: Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.
Key phrases: inject arbitrary web script or HTML, inject arbitrary web script or HTML via (, cross-site scripting (xss)
CVE-2002-1641: Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.
Key phrases: execute arbitrary code, execute arbitrary code via unknown vectors, buffer overflows