[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0104?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0104?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0105 mean in the context of cybersecurity?

[Assistant] CVE-2002-0105


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0105.

[Assistant] CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0105?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0105?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0106 mean in the context of cybersecurity?

[Assistant] CVE-2002-0106


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0106.

[Assistant] BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0106?

[Assistant] 20020108 KPMG-2002003: Bea Weblogic DOS-device Denial of Service


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0106?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0107 mean in the context of cybersecurity?

[Assistant] CVE-2002-0107


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0107.

[Assistant] Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0107?

[Assistant]
20020108 svindel.net security advisory - web admin vulnerability in CacheOS

20020205 RE: svindel.net security advisory - web admin vulnerability in Ca cheOS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0107?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0108 mean in the context of cybersecurity?

[Assistant] CVE-2002-0108


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0108.

[Assistant] Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0108?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0108?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0109 mean in the context of cybersecurity?

[Assistant] CVE-2002-0109


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0109.

[Assistant] Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0109?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0109?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0110 mean in the context of cybersecurity?

[Assistant] CVE-2002-0110


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0110.

[Assistant] Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0110?

[Assistant] 20020109 MiraMail 1.04 can give POP account access and details


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0110?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0111 mean in the context of cybersecurity?

[Assistant] CVE-2002-0111


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0111.

[Assistant] Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0111?

[Assistant] 20020109 File Transversal Vulnerability in Dino's WebServer


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0111?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0112 mean in the context of cybersecurity?

[Assistant] CVE-2002-0112


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0112.

[Assistant] Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0112?

[Assistant]
20020109 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability

20020109 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability

20020109 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability

20020111 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability (Solution)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0112?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0113 mean in the context of cybersecurity?

[Assistant] CVE-2002-0113


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0113.

[Assistant] EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0113?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0113?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0114 mean in the context of cybersecurity?

[Assistant] CVE-2002-0114


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0114.

[Assistant] EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0114?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0114?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0115 mean in the context of cybersecurity?

[Assistant] CVE-2002-0115


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0115.

[Assistant] Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0115?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0115?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0116 mean in the context of cybersecurity?

[Assistant] CVE-2002-0116


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0116.

[Assistant] Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0116?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0116?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0117 mean in the context of cybersecurity?

[Assistant] CVE-2002-0117


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0117.

[Assistant] Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0117?

[Assistant] 20020108 CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor]


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0117?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0118 mean in the context of cybersecurity?

[Assistant] CVE-2002-0118


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0118.

[Assistant] Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0118?

[Assistant] 20020108 CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor]


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0118?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0119 mean in the context of cybersecurity?

[Assistant] CVE-2002-0119


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0119.

[Assistant] Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0119?

[Assistant] 20020111 Bug in alcatel speed touch home adsl modem


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0119?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0120 mean in the context of cybersecurity?

[Assistant] CVE-2002-0120


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0120.

[Assistant] Apple Palm Desktop 4.0b76 and 4.0b77 creates world-readable backup files and folders when a hotsync is performed, which could allow a local user to obtain sensitive information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0120?

[Assistant] 20020112 Palm Desktop 4.0b76-77 for Mac OS X


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0120?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0121 mean in the context of cybersecurity?

[Assistant] CVE-2002-0121


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0121.

[Assistant] PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0121?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0121?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0122 mean in the context of cybersecurity?

[Assistant] CVE-2002-0122


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0122.

[Assistant] Siemens 3568i WAP mobile phones allows remote attackers to cause a denial of service (crash) via an SMS message containing unusual characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0122?

[Assistant] 20020114 Siemens Mobie SMS Exceptional Character Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0122?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0123 mean in the context of cybersecurity?

[Assistant] CVE-2002-0123


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0123.

[Assistant] MDG Computer Services Web Server 4D WS4D/eCommerce 3.0 and earlier, and possibly 3.5.3, allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0123?

[Assistant] 20020114 Web Server 4D/eCommerce 3.5.3 DoS Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0123?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0124 mean in the context of cybersecurity?

[Assistant] CVE-2002-0124


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0124.

[Assistant] MDG Computer Services Web Server 4D/eCommerce 3.5.3 allows remote attackers to exploit directory traversal vulnerability via a ../ (dot dot) containing URL-encoded slashes in the HTTP request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0124?

[Assistant] 20020114 Web Server 4D/eCommerce 3.5.3 Directory Traversal Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0124?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0125 mean in the context of cybersecurity?

[Assistant] CVE-2002-0125


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0125.

[Assistant] Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0125?

[Assistant] 20020114 Clanlib overflow / Super Methane Brothers overflow


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0125?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0126 mean in the context of cybersecurity?

[Assistant] CVE-2002-0126


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0126.

[Assistant] Buffer overflow in BlackMoon FTP Server 1.0 through 1.5 allows remote attackers to execute arbitrary code via a long argument to (1) USER, (2) PASS, or (3) CWD.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0126?

[Assistant] 20020115 BlackMoon FTPd Buffer Overflow Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0126?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0127 mean in the context of cybersecurity?

[Assistant] CVE-2002-0127


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0127.

[Assistant] Netgear RP114 Cable/DSL Web Safe Router Firmware 3.26, when configured to block traffic below port 1024, allows remote attackers to cause a denial of service (hang) via a port scan of the WAN port.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0127?

[Assistant] 20020115 Vulnerability Netgear RP-114 Router - nmap causes DOS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0127?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0128 mean in the context of cybersecurity?

[Assistant] CVE-2002-0128


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0128.

[Assistant] cgitest.exe in Sambar Server 5.1 before Beta 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0128?

[Assistant]
20020116 Sambar Webserver v5.1 DoS Vulnerability

20020206 Sambar Webserver Sample Script v5.1 DoS Vulnerability Exploit


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0128?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0129 mean in the context of cybersecurity?

[Assistant] CVE-2002-0129


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0129.

[Assistant] efax 0.9 and earlier, when installed setuid root, allows local users to read arbitrary files via the -d option, which prints the contents of the file in a warning message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0129?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0129?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0130 mean in the context of cybersecurity?

[Assistant] CVE-2002-0130


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0130.

[Assistant] Buffer overflow in efax 0.9 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -x argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0130?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0130?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0131 mean in the context of cybersecurity?

[Assistant] CVE-2002-0131


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0131.

[Assistant] ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0131?

[Assistant]
20020116 Re: Serious privacy leak in Python for Windows

20020115 Serious privacy leak in Python for Windows


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0131?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0132 mean in the context of cybersecurity?

[Assistant] CVE-2002-0132


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0132.

[Assistant] Buffer overflow in Chinput 3.0 allows local users to execute arbitrary code via a long HOME environment variable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0132?

[Assistant] 20020116 Chinput Buffer Overflow Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0132?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0133 mean in the context of cybersecurity?

[Assistant] CVE-2002-0133


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0133.

[Assistant] Buffer overflows in Avirt Gateway Suite 4.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long header fields to the HTTP proxy, or (2) a long string to the telnet proxy.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0133?

[Assistant]
20020212 Avirt Gateway 4.2  remote buffer overflow: proof of concept

20020121 [resend] Avirt Gateway Telnet Vulnerability (and more?)

20020117 Avirt Proxy Buffer Overflow Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0133?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0134 mean in the context of cybersecurity?

[Assistant] CVE-2002-0134


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0134.

[Assistant] Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0134?

[Assistant] 20020117 Avirt Gateway Suite Remote SYSTEM Level Compromise


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0134?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0135 mean in the context of cybersecurity?

[Assistant] CVE-2002-0135


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0135.

[Assistant] Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0135?

[Assistant] 20020118 Timbuktu 6.0.1 and Older DoS Advisory


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0135?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0136 mean in the context of cybersecurity?

[Assistant] CVE-2002-0136


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0136.

[Assistant] Microsoft Internet Explorer 5.5 on Windows 98 allows remote web pages to cause a denial of service (hang) via extremely long values for form fields such as INPUT and TEXTAREA, which can be automatically filled via Javascript.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0136?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0136?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0137 mean in the context of cybersecurity?

[Assistant] CVE-2002-0137


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0137.

[Assistant] CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0137?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0137?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0138 mean in the context of cybersecurity?

[Assistant] CVE-2002-0138


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0138.

[Assistant] CDRDAO 1.1.4 and 1.1.5 allows local users to read arbitrary files via the show-data command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0138?

[Assistant] 20020115 Re: cdrdao insecure filehandling


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0138?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0139 mean in the context of cybersecurity?

[Assistant] CVE-2002-0139


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0139.

[Assistant] Pi-Soft SpoonFTP 1.1 and earlier allows remote attackers to redirect traffic to other sites (aka FTP bounce) via the PORT command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0139?

[Assistant] 20020120 Bounce vulnerability in SpoonFTP 1.1.0.1


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0139?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0140 mean in the context of cybersecurity?

[Assistant] CVE-2002-0140


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0140.

[Assistant] Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0140?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0140?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0141 mean in the context of cybersecurity?

[Assistant] CVE-2002-0141


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0141.

[Assistant] Maelstrom GPL 3.0.1 allows local users to overwrite arbitrary files of other Maelstrom users via a symlink attack on the /tmp/f file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0141?

[Assistant] 20020120 Maelstrom 1.4.3 abartity file overwrite


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0141?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0142 mean in the context of cybersecurity?

[Assistant] CVE-2002-0142


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0142.

[Assistant] CGI handler in John Roy Pi3Web for Windows 2.0 beta 1 and 2 allows remote attackers to cause a denial of service (crash) via a series of requests whose physical path is exactly 260 characters long and ends in a series of . (dot) characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0142?

[Assistant]
20020114 Pi3Web Webserver v2.0 Buffer Overflow Vulnerability

20020121 Re: Pi3Web Webserver v2.0 Buffer Overflow Vulnerability

20020113 Pi3Web Webserver v2.0 Buffer Overflow Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0142?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0143 mean in the context of cybersecurity?

[Assistant] CVE-2002-0143


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0143.

[Assistant] Buffer overflow in Eterm of Enlightenment Imlib2 1.0.4 and earlier allows local users to execute arbitrary code via a long HOME environment variable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0143?

[Assistant]
20020121 Re: Eterm SGID utmp Buffer Overflow (Local)

20020113 Eterm SGID utmp Buffer Overflow (Local)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0143?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0144 mean in the context of cybersecurity?

[Assistant] CVE-2002-0144


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0144.

[Assistant] Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. (dot dot) attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0144?

[Assistant] 20020121 security vulnerability in chuid


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0144?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0145 mean in the context of cybersecurity?

[Assistant] CVE-2002-0145


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0145.

[Assistant] chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0145?

[Assistant] 20020121 security vulnerability in chuid


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0145?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0146 mean in the context of cybersecurity?

[Assistant] CVE-2002-0146


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0146.

[Assistant] fetchmail email client before 5.9.10 does not properly limit the maximum number of messages available, which allows a remote IMAP server to overwrite memory via a message count that exceeds the boundaries of an array.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0146?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0146?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0147 mean in the context of cybersecurity?

[Assistant] CVE-2002-0147


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0147.

[Assistant] Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0147?

[Assistant] 20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0147?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0148 mean in the context of cybersecurity?

[Assistant] CVE-2002-0148


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0148.

[Assistant] Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0148?

[Assistant] 20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0148?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0149 mean in the context of cybersecurity?

[Assistant] CVE-2002-0149


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0149.

[Assistant] Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0149?

[Assistant] 20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0149?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0150 mean in the context of cybersecurity?

[Assistant] CVE-2002-0150


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0150.

[Assistant] Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0150?

[Assistant] 20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0150?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0151 mean in the context of cybersecurity?

[Assistant] CVE-2002-0151


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0151.

[Assistant] Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM privileges via a long UNC request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0151?

[Assistant] 20020404 NSFOCUS SA2002-02 : Microsoft Windows MUP overlong request kernel overflow


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0151?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0152 mean in the context of cybersecurity?

[Assistant] CVE-2002-0152


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0152.

[Assistant] Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file:// directive with a large number of / characters, which affects Internet Explorer 5.1, Outlook Express 5.0 through 5.0.2, Entourage v. X and 2001, PowerPoint v. X, 2001, and 98, and Excel v. X and 2001 for Macintosh.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0152?

[Assistant] 20020416 w00w00 on Microsoft IE/Office for Mac OS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0152?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0153 mean in the context of cybersecurity?

[Assistant] CVE-2002-0153


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0153.

[Assistant] Internet Explorer 5.1 for Macintosh allows remote attackers to bypass security checks and invoke local AppleScripts within a specific HTML element, aka the "Local Applescript Invocation" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0153?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0153?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0154 mean in the context of cybersecurity?

[Assistant] CVE-2002-0154


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0154.

[Assistant] Buffer overflows in extended stored procedures for Microsoft SQL Server 7.0 and 2000 allow remote attackers to cause a denial of service or execute arbitrary code via a database query with certain long arguments.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0154?

[Assistant]
20020305 Another Sql Server 7 Buffer Overflow

20020312 Many, many, many Sql Server 7 & 2000 Buffer Overflows


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0154?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0155 mean in the context of cybersecurity?

[Assistant] CVE-2002-0155


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0155.

[Assistant] Buffer overflow in Microsoft MSN Chat ActiveX Control, as used in MSN Messenger 4.5 and 4.6, and Exchange Instant Messenger 4.5 and 4.6, allows remote attackers to execute arbitrary code via a long ResDLL parameter in the MSNChat OCX.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0155?

[Assistant] 20020508 ADVISORY: MSN Messenger OCX Buffer Overflow


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0155?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0157 mean in the context of cybersecurity?

[Assistant] CVE-2002-0157


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0157.

[Assistant] Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0157?

[Assistant] 20020502 R7-0003: Nautilus Symlink Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0157?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0158 mean in the context of cybersecurity?

[Assistant] CVE-2002-0158


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0158.

[Assistant] Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0158?

[Assistant]
20020402 NSFOCUS SA2002-01: Sun Solaris Xsun "-co" heap overflow

20020402 NSFOCUS SA2002-01: Sun Solaris Xsun "-co" heap overflow


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0158?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0159 mean in the context of cybersecurity?

[Assistant] CVE-2002-0159


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0159.

[Assistant] Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash the CSADMIN  module only (denial of service of administration function) or execute arbitrary code via format strings in the URL to port 2002.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0159?

[Assistant] 20020403 Web Interface Vulnerabilities in Cisco Secure ACS for Windows


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0159?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0160 mean in the context of cybersecurity?

[Assistant] CVE-2002-0160


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0160.

[Assistant] The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web root via a ..\.. (modified ..) in the URL to port 2002.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0160?

[Assistant] 20020403 Web Interface Vulnerabilities in Cisco Secure ACS for Windows


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0160?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0162 mean in the context of cybersecurity?

[Assistant] CVE-2002-0162


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0162.

[Assistant] LogWatch before 2.5 allows local users to execute arbitrary code via a symlink attack on the logwatch temporary directory.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0162?

[Assistant]
20020327 Root compromise through LogWatch 2.1.1

20020327 Root compromise through LogWatch 2.1.1


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0162?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0163 mean in the context of cybersecurity?

[Assistant] CVE-2002-0163


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0163.

[Assistant] Heap-based buffer overflow in Squid before 2.4 STABLE4, and Squid 2.5 and 2.6 until March 12, 2002 distributions, allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via compressed DNS responses.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0163?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0163?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0164 mean in the context of cybersecurity?

[Assistant] CVE-2002-0164


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0164.

[Assistant] Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0164?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0164?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0165 mean in the context of cybersecurity?

[Assistant] CVE-2002-0165


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0165.

[Assistant] LogWatch 2.5 allows local users to gain root privileges via a symlink attack, a different vulnerability than CVE-2002-0162.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0165?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0165?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0166 mean in the context of cybersecurity?

[Assistant] CVE-2002-0166


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0166.

[Assistant] Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0166?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0166?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0167 mean in the context of cybersecurity?

[Assistant] CVE-2002-0167


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0167.

[Assistant] Imlib before 1.9.13 sometimes uses the NetPBM package to load trusted images, which could allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain weaknesses of NetPBM.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0167?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0167?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0168 mean in the context of cybersecurity?

[Assistant] CVE-2002-0168


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0168.

[Assistant] Vulnerability in Imlib before 1.9.13 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code by manipulating arguments that are passed to malloc, which results in a heap corruption.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0168?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0168?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0169 mean in the context of cybersecurity?

[Assistant] CVE-2002-0169


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0169.

[Assistant] The default stylesheet for DocBook on Red Hat Linux 6.2 through 7.2 is installed with an insecure option enabled, which could allow users to overwrite files outside of the current directory from an untrusted document by using a full pathname as an element identifier.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0169?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0169?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0170 mean in the context of cybersecurity?

[Assistant] CVE-2002-0170


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0170.

[Assistant] Zope 2.2.0 through 2.5.1 does not properly verify the access for objects with proxy roles, which could allow some users to access documents in violation of the intended configuration.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0170?

[Assistant] 20020301 [matt@zope.com: [Zope-Annce] Zope Hotfix 2002-03-01 (Ownership Roles Enforcement)]


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0170?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0171 mean in the context of cybersecurity?

[Assistant] CVE-2002-0171


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0171.

[Assistant] IRISconsole 2.0 may allow users to log into the icadmin account with an incorrect password in some circumstances, which could allow users to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0171?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0171?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0172 mean in the context of cybersecurity?

[Assistant] CVE-2002-0172


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0172.

[Assistant] /dev/ipfilter on SGI IRIX 6.5 is installed by /dev/MAKEDEV with insecure default permissions (644), which could allow a local user to cause a denial of service (traffic disruption).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0172?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0172?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0173 mean in the context of cybersecurity?

[Assistant] CVE-2002-0173


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0173.

[Assistant] Buffer overflow in cpr for the eoe.sw.cpr SGI Checkpoint-Restart Software package on SGI IRIX 6.5.10 and earlier may allow local users to gain root privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0173?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0173?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0174 mean in the context of cybersecurity?

[Assistant] CVE-2002-0174


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0174.

[Assistant] nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0174?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0174?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0175 mean in the context of cybersecurity?

[Assistant] CVE-2002-0175


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0175.

[Assistant] libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0175?

[Assistant]
20020320 [VulnWatch] Bypassing libsafe format string protection

20020320 Bypassing libsafe format string protection


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0175?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0176 mean in the context of cybersecurity?

[Assistant] CVE-2002-0176


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0176.

[Assistant] The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0176?

[Assistant]
20020320 [VulnWatch] Bypassing libsafe format string protection

20020320 Bypassing libsafe format string protection


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0176?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0177 mean in the context of cybersecurity?

[Assistant] CVE-2002-0177


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0177.

[Assistant] Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 client.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0177?

[Assistant]
20020402 icecast 1.3.11 remote shell/root exploit - #temp

20020403 Icecast temp patch (OR: Patches?  We DO need stinkin' patches!!@$!)

20020404 Full analysis of multiple remotely exploitable bugs in Icecast 1.3.11


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0177?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0178 mean in the context of cybersecurity?

[Assistant] CVE-2002-0178


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0178.

[Assistant] uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symbolic link, which could allow attackers to overwrite files or execute commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0178?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0178?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0179 mean in the context of cybersecurity?

[Assistant] CVE-2002-0179


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0179.

[Assistant] Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0179?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0179?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0180 mean in the context of cybersecurity?

[Assistant] CVE-2002-0180


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0180.

[Assistant] Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by connecting to the monitored web server from an IP address that resolves to a long hostname.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0180?

[Assistant] 20020415 Remote buffer overflow in Webalizer


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0180?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0181 mean in the context of cybersecurity?

[Assistant] CVE-2002-0181


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0181.

[Assistant] Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and steal cookies of other IMP/HORDE users via the script parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0181?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0181?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0184 mean in the context of cybersecurity?

[Assistant] CVE-2002-0184


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0184.

[Assistant] Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0184?

[Assistant]
20020425 Sudo version 1.6.6 now available (fwd)

20020425 [slackware-security] sudo upgrade fixes a potential vulnerability

20020425 [Global InterSec 2002041701] Sudo Password Prompt


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0184?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0185 mean in the context of cybersecurity?

[Assistant] CVE-2002-0185


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0185.

[Assistant] mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which allows remote attackers to call possibly dangerous functions from the imported module.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0185?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0185?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0186 mean in the context of cybersecurity?

[Assistant] CVE-2002-0186


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0186.

[Assistant] Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data queries with a long content-type parameter, aka "Unchecked Buffer in SQLXML ISAPI Extension."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0186?

[Assistant]
20020613 [VulnWatch] wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting

20020613 wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0186?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0187 mean in the context of cybersecurity?

[Assistant] CVE-2002-0187


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0187.

[Assistant] Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via the root parameter as part of an XML SQL query, aka "Script Injection via XML Tag."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0187?

[Assistant]
20020613 [VulnWatch] wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting

20020613 wp-02-0007: Microsoft SQLXML ISAPI Overflow and Cross Site Scripting


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0187?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0188 mean in the context of cybersecurity?

[Assistant] CVE-2002-0188


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0188.

[Assistant] Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the second variant of the "Content Disposition" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0188?

[Assistant] 20020516 [SNS Advisory No.48] Microsoft Internet Explorer Still Download And Execute ANY Program Automatically


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0188?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0189 mean in the context of cybersecurity?

[Assistant] CVE-2002-0189


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0189.

[Assistant] Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL that exploits a local HTML resource file, aka the "Cross-Site Scripting in Local HTML Resource" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0189?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0189?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0190 mean in the context of cybersecurity?

[Assistant] CVE-2002-0190


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0190.

[Assistant] Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code under fewer security restrictions via a malformed web page that requires NetBIOS connectivity, aka "Zone Spoofing through Malformed Web Page" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0190?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0190?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0191 mean in the context of cybersecurity?

[Assistant] CVE-2002-0191


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0191.

[Assistant] Microsoft Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the "{" character via script containing the cssText property of the stylesheet object, aka "Local Information Disclosure through HTML Object" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0191?

[Assistant] 20020402 Reading portions of local files in IE, depending on structure (GM#004-IE)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0191?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0192 mean in the context of cybersecurity?

[Assistant] CVE-2002-0192


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0192.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0192?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0192?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0193 mean in the context of cybersecurity?

[Assistant] CVE-2002-0193


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0193.

[Assistant] Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type header fields that cause the application for the spoofed file type to pass the file back to the operating system for handling rather than raise an error message, aka the first variant of the "Content Disposition" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0193?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0193?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0196 mean in the context of cybersecurity?

[Assistant] CVE-2002-0196


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0196.

[Assistant] GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0196?

[Assistant] 20020122 (Repost) CwpApi : GetRelativePath() returns invalid paths (security advisory)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0196?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0197 mean in the context of cybersecurity?

[Assistant] CVE-2002-0197


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0197.

[Assistant] psyBNC 2.3 beta and earlier allows remote attackers to spoof encrypted, trusted messages by sending lines that begin with the "[B]" sequence, which makes the message appear legitimate.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0197?

[Assistant]
20020122 psyBNC2.3 Beta - encrypted text spoofable in others irc terminal

20020122 psyBNC 2.3 Beta - encrypted text "spoofable" in others' irc terminals


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0197?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0198 mean in the context of cybersecurity?

[Assistant] CVE-2002-0198


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0198.

[Assistant] Buffer overflow in plDaniels ripMime 1.2.6 and earlier, as used in other programs such as xamime and inflex, allows remote attackers to execute arbitrary code via an attachment in a long filename.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0198?

[Assistant] 20020122 pldaniels - ripMime 1.2.6 and lower?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0198?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0199 mean in the context of cybersecurity?

[Assistant] CVE-2002-0199


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0199.

[Assistant] Buffer overflow in admin.cgi for Nullsoft Shoutcast Server 1.8.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an argument with a large number of backslashes.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0199?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0199?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0200 mean in the context of cybersecurity?

[Assistant] CVE-2002-0200


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0200.

[Assistant] Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service via an HTTP request for an MS-DOS device name.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0200?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0200?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0201 mean in the context of cybersecurity?

[Assistant] CVE-2002-0201


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0201.

[Assistant] Cyberstop Web Server for Windows 0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request, possibly triggering a buffer overflow.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0201?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0201?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0202 mean in the context of cybersecurity?

[Assistant] CVE-2002-0202


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0202.

[Assistant] PaintBBS 1.2 installs certain files and directories with insecure permissions, which allows local users to (1) obtain the encrypted server password via the world-readable oekakibbs.conf file, or (2) modify the server configuration via the world-writeable /oekaki/ folder.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0202?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0202?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0203 mean in the context of cybersecurity?

[Assistant] CVE-2002-0203


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0203.

[Assistant] ttawebtop.cgi in Tarantella Enterprise 3.20 on SPARC Solaris and Linux, and 3.1x and 3.0x including 3.11.903, allows remote attackers to view directory contents via an empty pg parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0203?

[Assistant] 20020124 ISSTW Security Advisory Tarantella Enterprise 3.11.903 Directory Index Disclosure Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0203?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0204 mean in the context of cybersecurity?

[Assistant] CVE-2002-0204


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0204.

[Assistant] Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier, if modified or used in a networked capacity contrary to its own design as a single-user application, may allow local or remote attackers to execute arbitrary code via a long command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0204?

[Assistant] 20020124 gnuchess buffer overflow vulnerabilty


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0204?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0205 mean in the context of cybersecurity?

[Assistant] CVE-2002-0205


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0205.

[Assistant] Cross-site scripting (CSS) vulnerability in error.asp for Plumtree Corporate Portal 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the "Description" parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0205?

[Assistant]
20020104 Cross-Site Scripting in PlumTree?

20020124 Plumtree Corporate Portal Cross-Site Scripting (Patch Available)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0205?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0206 mean in the context of cybersecurity?

[Assistant] CVE-2002-0206


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0206.

[Assistant] index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0206?

[Assistant] 20020116 PHP-Nuke allows Command Execution & Much more


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0206?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0207 mean in the context of cybersecurity?

[Assistant] CVE-2002-0207


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0207.

[Assistant] Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0207?

[Assistant]
20020124 Potential RealPlayer 8 Vulnerability

20020124 RealPlayer Buffer Overflow [Sentinel Chicken Networks Security Advisory #01]


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0207?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0208 mean in the context of cybersecurity?

[Assistant] CVE-2002-0208


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0208.

[Assistant] PGP Security PGPfire 7.1 for Windows alters the system's TCP/IP stack and modifies packets in ICMP error messages in a way that allows remote attackers to determine that the system is running PGPfire.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0208?

[Assistant] 20020125 Identifying PGP Corporate Desktop 7.1 with PGPfire Personal Desktop Firewall installed (no need to be enabled) on Microsoft Windows Based OSs


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0208?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0209 mean in the context of cybersecurity?

[Assistant] CVE-2002-0209


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0209.

[Assistant] Nortel Alteon ACEdirector WebOS 9.0, with the Server Load Balancing (SLB) and Cookie-Based Persistence features enabled, allows remote attackers to determine the real IP address of a web server with a half-closed session, which causes ACEdirector to send packets from the server without changing the address to the virtual IP address.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0209?

[Assistant]
20020312 Re: Alteon ACEdirector signature/security bug

20020125 Alteon ACEdirector signature/security bug


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0209?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0210 mean in the context of cybersecurity?

[Assistant] CVE-2002-0210


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0210.

[Assistant] setlicense for TOLIS Group Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0210?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0210?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0211 mean in the context of cybersecurity?

[Assistant] CVE-2002-0211


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0211.

[Assistant] Race condition in the installation script for Tarantella Enterprise 3 3.01 through 3.20 creates a world-writeable temporary "gunzip" program before executing it, which could allow local users to execute arbitrary commands by modifying the program before it is executed.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0211?

[Assistant]
20020126 Vulnerability report for Tarantella Enterprise 3.

20020404 Exploit for Tarantella Enterprise 3 installation (BID 3966)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0211?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0212 mean in the context of cybersecurity?

[Assistant] CVE-2002-0212


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0212.

[Assistant] The login for Hosting Controller 1.1 through 1.4.1 returns different error messages when a valid or invalid user is provided, which allows remote attackers to determine the existence of valid usernames and makes it easier to conduct a brute force attack.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0212?

[Assistant] 20020126 [ARL02-A01] Vulnerability in Hosting Controller


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0212?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0213 mean in the context of cybersecurity?

[Assistant] CVE-2002-0213


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0213.

[Assistant] xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0213?

[Assistant] 20020128 [ Hackerslab bug_paper ] Xkas application vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0213?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0214 mean in the context of cybersecurity?

[Assistant] CVE-2002-0214


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0214.

[Assistant] Compaq Intel PRO/Wireless 2011B LAN USB Device Driver 1.5.16.0 through 1.5.18.0 stores the 128-bit WEP (Wired Equivalent Privacy) key in plaintext in a registry key with weak permissions, which allows local users to decrypt network traffic by reading the WEP key from the registry key.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0214?

[Assistant] 20020128 Intel WLAN Driver storing 128bit WEP-Key in plain text!


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0214?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0215 mean in the context of cybersecurity?

[Assistant] CVE-2002-0215


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0215.

[Assistant] Agora.cgi 3.2r through 4.0 while in debug mode allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0215?

[Assistant] 20020128 [SUPERPETZ ADVISORY #001 - agora.cgi Secret Path Disclosure Vulnerability]


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0215?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0216 mean in the context of cybersecurity?

[Assistant] CVE-2002-0216


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0216.

[Assistant] userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0216?

[Assistant] 20020129 Xoops SQL fragment disclosure and SQL injection vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0216?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0217 mean in the context of cybersecurity?

[Assistant] CVE-2002-0217


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0217.

[Assistant] Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php.