[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0845.

[Assistant] Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0845?

[Assistant] 20020808 EEYE: Sun(TM) ONE / iPlanet Web Server 4.1 and 6.0 Remote Buffer Overflow


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0845?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0846 mean in the context of cybersecurity?

[Assistant] CVE-2002-0846


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0846.

[Assistant] The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0846?

[Assistant] 20020830 RE:  Macromedia Shockwave Flash Malformed Header Overflow


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0846?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0847 mean in the context of cybersecurity?

[Assistant] CVE-2002-0847


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0847.

[Assistant] tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0847?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0847?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0848 mean in the context of cybersecurity?

[Assistant] CVE-2002-0848


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0848.

[Assistant] Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0848?

[Assistant] 20020807 Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0848?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0849 mean in the context of cybersecurity?

[Assistant] CVE-2002-0849


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0849.

[Assistant] Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0849?

[Assistant]
20020808 iDEFENSE Security Advisory: iSCSI Default Configuration File Settings

20020808 Re: [VulnWatch] iDEFENSE Security Advisory: iSCSI Default Configuration File Settings


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0849?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0850 mean in the context of cybersecurity?

[Assistant] CVE-2002-0850


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0850.

[Assistant] Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0850?

[Assistant]
20020905 Foundstone Labs Advisory - Remotely Exploitable Buffer Overflow in PGP

20020906 Foundstone Labs Advisory - Remotely Exploitable Buffer Overflow in PGP


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0850?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0851 mean in the context of cybersecurity?

[Assistant] CVE-2002-0851


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0851.

[Assistant] Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0851?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0851?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0852 mean in the context of cybersecurity?

[Assistant] CVE-2002-0852


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0852.

[Assistant] Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid payloads.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0852?

[Assistant] 20020812 Cisco VPN Client Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0852?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0853 mean in the context of cybersecurity?

[Assistant] CVE-2002-0853


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0853.

[Assistant] Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0853?

[Assistant] 20020812 Cisco VPN Client Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0853?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0854 mean in the context of cybersecurity?

[Assistant] CVE-2002-0854


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0854.

[Assistant] Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0854?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0854?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0855 mean in the context of cybersecurity?

[Assistant] CVE-2002-0855


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0855.

[Assistant] Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0855?

[Assistant] 20020724 cross-site scripting bug of Mailman


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0855?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0856 mean in the context of cybersecurity?

[Assistant] CVE-2002-0856


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0856.

[Assistant] SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0856?

[Assistant]
20020813 ISS Security Brief: Remote Denial of Service Vulnerability in Oracle9i SQL*NET

20020813 Remote Denial of Service Vulnerability in Oracle9i SQL*NET


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0856?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0857 mean in the context of cybersecurity?

[Assistant] CVE-2002-0857


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0857.

[Assistant] Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0857?

[Assistant] 20020814 Oracle Listener Control Format String Vulnerabilities (#NISR14082002)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0857?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0858 mean in the context of cybersecurity?

[Assistant] CVE-2002-0858


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0858.

[Assistant] catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0858?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0858?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0859 mean in the context of cybersecurity?

[Assistant] CVE-2002-0859


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0859.

[Assistant] Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0859?

[Assistant] 20020619 Microsoft SQL Server 2000 OpenDataSource Buffer Overflow (#NISR19062002)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0859?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0860 mean in the context of cybersecurity?

[Assistant] CVE-2002-0860


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0860.

[Assistant] The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0860?

[Assistant] 20020408 Reading local files with OWC in IE (GM#006-IE)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0860?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0861 mean in the context of cybersecurity?

[Assistant] CVE-2002-0861


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0861.

[Assistant] Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0861?

[Assistant] 20020408 Controlling the clipboard with OWC in IE (GM#007-IE)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0861?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0862 mean in the context of cybersecurity?

[Assistant] CVE-2002-0862


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0862.

[Assistant] The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0862?

[Assistant] 20020819 Insufficient Verification of Client Certificates in IIS 5.0 pre sp3


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0862?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0863 mean in the context of cybersecurity?

[Assistant] CVE-2002-0863


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0863.

[Assistant] Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0863?

[Assistant]
20020916 Microsoft Windows Remote Desktop Protocol checksum and keystroke vulnerabilities

20020918 Microsoft Windows Terminal Services vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0863?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0864 mean in the context of cybersecurity?

[Assistant] CVE-2002-0864


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0864.

[Assistant] The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka "Denial of Service in Remote Desktop."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0864?

[Assistant]
20020918 Microsoft Windows Terminal Services vulnerabilities

20020916 Microsoft Windows XP Remote Desktop denial of service vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0864?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0865 mean in the context of cybersecurity?

[Assistant] CVE-2002-0865


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0865.

[Assistant] A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0865?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0865?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0866 mean in the context of cybersecurity?

[Assistant] CVE-2002-0866


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0866.

[Assistant] Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0866?

[Assistant] 20020923 Technical information about the vulnerabilities fixed by MS-02-52


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0866?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0867 mean in the context of cybersecurity?

[Assistant] CVE-2002-0867


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0867.

[Assistant] Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0867?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0867?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0869 mean in the context of cybersecurity?

[Assistant] CVE-2002-0869


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0869.

[Assistant] Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0869?

[Assistant]
20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)

20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0869?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0870 mean in the context of cybersecurity?

[Assistant] CVE-2002-0870


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0870.

[Assistant] The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface, possibly via a variant of the original attack, as identified by Cisco bug ID CSCdw08549.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0870?

[Assistant] 20020814 Cisco Content Service Switch 11000 Series Web Management Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0870?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0871 mean in the context of cybersecurity?

[Assistant] CVE-2002-0871


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0871.

[Assistant] xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0871?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0871?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0872 mean in the context of cybersecurity?

[Assistant] CVE-2002-0872


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0872.

[Assistant] l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0872?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0872?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0873 mean in the context of cybersecurity?

[Assistant] CVE-2002-0873


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0873.

[Assistant] Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0873?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0873?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0874 mean in the context of cybersecurity?

[Assistant] CVE-2002-0874


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0874.

[Assistant] Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0874?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0874?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0875 mean in the context of cybersecurity?

[Assistant] CVE-2002-0875


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0875.

[Assistant] Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0875?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0875?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0876 mean in the context of cybersecurity?

[Assistant] CVE-2002-0876


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0876.

[Assistant] Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0876?

[Assistant]
20020709 Exploit for previously reported DoS issues in Shambala Server 4.5

20020530 [[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0876?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0877 mean in the context of cybersecurity?

[Assistant] CVE-2002-0877


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0877.

[Assistant] Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0877?

[Assistant] 20020530 [[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0877?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0878 mean in the context of cybersecurity?

[Assistant] CVE-2002-0878


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0878.

[Assistant] SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0878?

[Assistant] 20020604 sql injection in Logisense software


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0878?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0879 mean in the context of cybersecurity?

[Assistant] CVE-2002-0879


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0879.

[Assistant] showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0879?

[Assistant] 20020529 Gafware's CFXImage vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0879?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0880 mean in the context of cybersecurity?

[Assistant] CVE-2002-0880


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0880.

[Assistant] Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demonstrated by (1) "jolt", (2) "jolt2", (3) "raped", (4) "hping2", (5) "bloop", (6) "bubonic", (7) "mutant", (8) "trash", and (9) "trash2."


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0880?

[Assistant] 20020522 Multiple Vulnerabilities in Cisco IP Telephones


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0880?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0881 mean in the context of cybersecurity?

[Assistant] CVE-2002-0881


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0881.

[Assistant] Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0881?

[Assistant]
20020522 Multiple Vulnerabilities in CISCO VoIP Phones

20020522 Multiple Vulnerabilities in Cisco IP Telephones


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0881?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0882 mean in the context of cybersecurity?

[Assistant] CVE-2002-0882


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0882.

[Assistant] The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0882?

[Assistant]
20020522 Multiple Vulnerabilities in CISCO VoIP Phones

20020522 Multiple Vulnerabilities in Cisco IP Telephones


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0882?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0883 mean in the context of cybersecurity?

[Assistant] CVE-2002-0883


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0883.

[Assistant] Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0883?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0883?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0884 mean in the context of cybersecurity?

[Assistant] CVE-2002-0884


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0884.

[Assistant] Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0884?

[Assistant]
20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd

20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0884?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0885 mean in the context of cybersecurity?

[Assistant] CVE-2002-0885


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0885.

[Assistant] Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0885?

[Assistant]
20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd

20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0885?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0886 mean in the context of cybersecurity?

[Assistant] CVE-2002-0886


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0886.

[Assistant] Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0886?

[Assistant] 20020523 CBOS - Improving Resilience to Denial-of-Service Attacks


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0886?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0887 mean in the context of cybersecurity?

[Assistant] CVE-2002-0887


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0887.

[Assistant] scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0887?

[Assistant] 20010522 [SRT2001-10] - scoadmin /tmp issues


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0887?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0888 mean in the context of cybersecurity?

[Assistant] CVE-2002-0888


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0888.

[Assistant] 3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0888?

[Assistant]
20020612 Part II: Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router

20020527 Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0888?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0889 mean in the context of cybersecurity?

[Assistant] CVE-2002-0889


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0889.

[Assistant] Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0889?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0889?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0891 mean in the context of cybersecurity?

[Assistant] CVE-2002-0891


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0891.

[Assistant] The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0891?

[Assistant] 20020527 Netscreen 25 unauthorised reboot issue


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0891?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0892 mean in the context of cybersecurity?

[Assistant] CVE-2002-0892


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0892.

[Assistant] The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0892?

[Assistant]
20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1

20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0892?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0893 mean in the context of cybersecurity?

[Assistant] CVE-2002-0893


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0893.

[Assistant] Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0893?

[Assistant]
20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1

20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0893?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0894 mean in the context of cybersecurity?

[Assistant] CVE-2002-0894


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0894.

[Assistant] NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0894?

[Assistant]
20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1

20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0894?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0895 mean in the context of cybersecurity?

[Assistant] CVE-2002-0895


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0895.

[Assistant] Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0895?

[Assistant] 20020522 MatuFtpServer Remote Buffer Overflow and Possible DoS


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0895?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0896 mean in the context of cybersecurity?

[Assistant] CVE-2002-0896


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0896.

[Assistant] The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0896?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0896?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0897 mean in the context of cybersecurity?

[Assistant] CVE-2002-0897


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0897.

[Assistant] LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0897?

[Assistant]
20020524 [SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability

20020524 [SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0897?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0898 mean in the context of cybersecurity?

[Assistant] CVE-2002-0898


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0898.

[Assistant] Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0898?

[Assistant]
20020527 Reading ANY local file in Opera (GM#001-OP)

20020527 Reading ANY local file in Opera (GM#001-OP)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0898?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0899 mean in the context of cybersecurity?

[Assistant] CVE-2002-0899


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0899.

[Assistant] Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0899?

[Assistant]
20020527 [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability #2

20020527 [VulnWatch] [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability #2


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0899?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0900 mean in the context of cybersecurity?

[Assistant] CVE-2002-0900


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0900.

[Assistant] Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup capability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0900?

[Assistant] 20020524 pks public key server DOS and remote execution


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0900?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0901 mean in the context of cybersecurity?

[Assistant] CVE-2002-0901


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0901.

[Assistant] Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0901?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0901?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0902 mean in the context of cybersecurity?

[Assistant] CVE-2002-0902


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0902.

[Assistant] Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0902?

[Assistant] 20020526 Cross Site Scripting Vulnerability in phpBB2's [IMG] tag and remote avatar


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0902?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0903 mean in the context of cybersecurity?

[Assistant] CVE-2002-0903


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0903.

[Assistant] register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack on the new user ID and the code value.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0903?

[Assistant] 20020526 wbbboard 1.1.1 registration _new_users_vulnerability_


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0903?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0904 mean in the context of cybersecurity?

[Assistant] CVE-2002-0904


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0904.

[Assistant] SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0904?

[Assistant]
20020529 New Kismet Packages available - SayText() and suid kismet_server issues

20020528 New Kismet Packages available - SayText() and suid kismet_server issues


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0904?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0905 mean in the context of cybersecurity?

[Assistant] CVE-2002-0905


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0905.

[Assistant] Buffer overflow in sqlexec for Informix SE-7.25 allows local users to gain root privileges via a long INFORMIXDIR environment variable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0905?

[Assistant] 20020529 Informix SE-7.25 /lib/sqlexec Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0905?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0906 mean in the context of cybersecurity?

[Assistant] CVE-2002-0906


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0906.

[Assistant] Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malicious DNS server.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0906?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0906?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0907 mean in the context of cybersecurity?

[Assistant] CVE-2002-0907


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0907.

[Assistant] Buffer overflow in SHOUTcast 1.8.9 and other versions before 1.8.12 allows a remote authenticated DJ to execute arbitrary code on the server via a long value in a header whose name begins with "icy-".


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0907?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0907?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0908 mean in the context of cybersecurity?

[Assistant] CVE-2002-0908


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0908.

[Assistant] Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0908?

[Assistant] 20020524 Cisco IDS Device Manager 3.1.1 Advisory


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0908?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0909 mean in the context of cybersecurity?

[Assistant] CVE-2002-0909


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0909.

[Assistant] Multiple buffer overflows in mnews 1.22 and earlier allow (1) a remote NNTP server to execute arbitrary code via long responses, or local users can gain privileges via long command line arguments (2) -f, (3) -n, (4) -D, (5) -M, or (6) -P, or via long environment variables (7) JNAMES or (8) MAILSERVER.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0909?

[Assistant] 20020531 SRT Security Advisory (SRT2002-04-31-1159):  Mnews


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0909?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0910 mean in the context of cybersecurity?

[Assistant] CVE-2002-0910


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0910.

[Assistant] Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0910?

[Assistant]
20020524 Netstd 3.07-17 multiple remote buffer overflows

20020525 Re: Netstd 3.07-17 multiple remote buffer overflows


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0910?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0911 mean in the context of cybersecurity?

[Assistant] CVE-2002-0911


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0911.

[Assistant] Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0911?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0911?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0912 mean in the context of cybersecurity?

[Assistant] CVE-2002-0912


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0912.

[Assistant] in.uucpd UUCP server in Debian GNU/Linux 2.2, and possibly other operating systems, does not properly terminate long strings, which allows remote attackers to cause a denial of service, possibly due to a buffer overflow.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0912?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0912?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0913 mean in the context of cybersecurity?

[Assistant] CVE-2002-0913


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0913.

[Assistant] Format string vulnerability in log_doit function of Slurp NNTP client 1.1.0 allows a malicious news server to execute arbitrary code on the client via format strings in a server response.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0913?

[Assistant]
20020604 SRT Security Advisory (SRT2002-06-04-1011): slurp

20020604 SRT Security Advisory (SRT2002-06-04-1011): slurp


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0913?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0914 mean in the context of cybersecurity?

[Assistant] CVE-2002-0914


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0914.

[Assistant] Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or negative value for the year, which causes a tight loop.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0914?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0914?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0915 mean in the context of cybersecurity?

[Assistant] CVE-2002-0915


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0915.

[Assistant] autorun in Xandros based Linux distributions allows local users to read the first line of arbitrary files via the -c parameter, which causes autorun to print the first line of the file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0915?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0915?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0916 mean in the context of cybersecurity?

[Assistant] CVE-2002-0916


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0916.

[Assistant] Format string vulnerability in the allowuser code for the Stellar-X msntauth authentication module, as distributed in Squid 2.4.STABLE6 and earlier, allows remote attackers to execute arbitrary code via format strings in the user name, which are not properly handled in a syslog call.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0916?

[Assistant]
20020603 [VulnWatch] [DER #11] - Remotey exploitable fmt string bug in squid

20020604 [DER #11] - Remotey exploitable fmt string bug in squid


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0916?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0917 mean in the context of cybersecurity?

[Assistant] CVE-2002-0917


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0917.

[Assistant] CGIScript.net csPassword.cgi stores .htpasswd files under the web document root, which could allow remote authenticated users to download the file and crack the passwords of other users.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0917?

[Assistant] 20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0917?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0918 mean in the context of cybersecurity?

[Assistant] CVE-2002-0918


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0918.

[Assistant] CGIScript.net csPassword.cgi leaks sensitive information such as the pathname of the server in debug messages that are presented when the script fails, which allows remote attackers to obtain the information via a "remove" option in the command parameter, which generates an error.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0918?

[Assistant] 20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0918?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0919 mean in the context of cybersecurity?

[Assistant] CVE-2002-0919


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0919.

[Assistant] CGIScript.net csPassword.cgi allows remote authenticated users to modify the .htaccess file and gain privileges via newlines in the title field of the edit page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0919?

[Assistant] 20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0919?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0920 mean in the context of cybersecurity?

[Assistant] CVE-2002-0920


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0920.

[Assistant] CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users (and possibly remote attackers) to gain privileges by stealing the file before it has been processed.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0920?

[Assistant] 20020529 CGIscript.net - csPassword.cgi - Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0920?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0921 mean in the context of cybersecurity?

[Assistant] CVE-2002-0921


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0921.

[Assistant] CGIScript.net csNews.cgi allows remote attackers to obtain potentially sensitive information, such as the full server pathname and other configuration settings, via the viewnews command with an invalid database, which leaks the information in error messages.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0921?

[Assistant] 20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0921?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0922 mean in the context of cybersecurity?

[Assistant] CVE-2002-0922


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0922.

[Assistant] CGIScript.net csNews.cgi allows remote attackers to obtain database files via a direct URL-encoded request to (1) default%2edb or (2) default%2edb.style, or remote authenticated users to perform administrative actions via (3) a database parameter set to default%2edb.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0922?

[Assistant] 20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0922?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0923 mean in the context of cybersecurity?

[Assistant] CVE-2002-0923


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0923.

[Assistant] CGIScript.net csNews.cgi allows remote authenticated users to read arbitrary files, and possibly gain privileges, via the (1) pheader or (2) pfooter parameters in the "Advanced Settings" capability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0923?

[Assistant] 20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0923?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0924 mean in the context of cybersecurity?

[Assistant] CVE-2002-0924


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0924.

[Assistant] CGIScript.net csNews.cgi allows remote authenticated users to execute arbitrary Perl code via terminating quotes and metacharacters in text fields of the "Advanced Settings" capability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0924?

[Assistant] 20020611 CGIscript.net - csNews.cgi - Multiple Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0924?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0925 mean in the context of cybersecurity?

[Assistant] CVE-2002-0925


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0925.

[Assistant] Format string vulnerability in mmsyslog function allows remote attackers to execute arbitrary code via (1) the USER command to mmpop3d for mmmail 0.0.13 and earlier, (2) the HELO command to mmsmtpd for mmmail 0.0.13 and earlier, or (3) the USER command to mmftpd 0.0.7 and earlier.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0925?

[Assistant]
20020612 [CERT-intexxia] mmmail POP3-SMTP Daemon Format String Vulnerability

20020612 [CERT-intexxia] mmftpd FTP Daemon Format String Vulnerability


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0925?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0926 mean in the context of cybersecurity?

[Assistant] CVE-2002-0926


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0926.

[Assistant] Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0926?

[Assistant] 20020617 Directory Traversal in Wolfram Research's webMathematica


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0926?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0928 mean in the context of cybersecurity?

[Assistant] CVE-2002-0928


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0928.

[Assistant] Buffer overflow in the Pirch 98 IRC client allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hyperlink in a channel or private message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0928?

[Assistant] 20020621 Pirch 98 Link Handling Buffer Overflow


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0928?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0929 mean in the context of cybersecurity?

[Assistant] CVE-2002-0929


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0929.

[Assistant] Buffer overflows in the DHCP server for NetWare 6.0 SP1 allow remote attackers to cause a denial of service (reboot) via long DHCP requests.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0929?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0929?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0930 mean in the context of cybersecurity?

[Assistant] CVE-2002-0930


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0930.

[Assistant] Format string vulnerability in the FTP server for Novell Netware 6.0 SP1 (NWFTPD) allows remote attackers to cause a denial of service (ABEND) via format strings in the USER command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0930?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0930?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0931 mean in the context of cybersecurity?

[Assistant] CVE-2002-0931


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0931.

[Assistant] Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as other users via a (1) Title or (2) Description when a new ticket is created by a support assistant, via the "id" parameter to the index.php script with the (3) tickettime, (4) ticketfiles, or (5) updateticketlog operations, or (6) via the update section when a ticket is edited.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0931?

[Assistant] 20020610 [ARL02-A15] Multiple Security Issues in MyHelpdesk


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0931?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0932 mean in the context of cybersecurity?

[Assistant] CVE-2002-0932


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0932.

[Assistant] SQL injection vulnerability in index.php for MyHelpDesk 20020509, and possibly other versions, allows remote attackers to conduct unauthorized activities via SQL code in the "id" parameter for the operations (1) detailticket, (2) editticket, or (3) updateticketlog.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0932?

[Assistant] 20020610 [ARL02-A15] Multiple Security Issues in MyHelpdesk


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0932?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0933 mean in the context of cybersecurity?

[Assistant] CVE-2002-0933


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0933.

[Assistant] Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0933?

[Assistant] 20020610 Datalex BookIt! Consumer Password Vulnerabilities


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0933?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0934 mean in the context of cybersecurity?

[Assistant] CVE-2002-0934


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0934.

[Assistant] Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0934?

[Assistant] 20020610 AlienForm2 CGI script: arbitrary file read/write


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0934?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0935 mean in the context of cybersecurity?

[Assistant] CVE-2002-0935


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0935.

[Assistant] Apache Tomcat 4.0.3, and possibly other versions before 4.1.3 beta, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of requests to the server with null characters, which causes the working threads to hang.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0935?

[Assistant]
20020620 KPMG-2002025: Apache Tomcat Denial of Service

20020620 [VulnWatch] KPMG-2002025: Apache Tomcat Denial of Service

[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/

[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/

[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0935?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0936 mean in the context of cybersecurity?

[Assistant] CVE-2002-0936


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0936.

[Assistant] The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0936?

[Assistant]
[tomcat-dev] 20190319 svn commit: r1855831 [21/30] - in /tomcat/site/trunk: ./ docs/ xdocs/

[tomcat-dev] 20190325 svn commit: r1856174 [19/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/

[tomcat-dev] 20200213 svn commit: r1873980 [24/34] - /tomcat/site/trunk/docs/


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0936?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0937 mean in the context of cybersecurity?

[Assistant] CVE-2002-0937


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0937.

[Assistant] The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0937?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0937?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0938 mean in the context of cybersecurity?

[Assistant] CVE-2002-0938


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0938.

[Assistant] Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote attackers to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0938?

[Assistant] 20020621 Re: XSS in CiscoSecure ACS v3.0


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0938?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0939 mean in the context of cybersecurity?

[Assistant] CVE-2002-0939


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0939.

[Assistant] The Install Wizard for nCipher MSCAPI CSP 5.50 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Card Set, which results in a lower protection level than specified by the user (module protection only).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0939?

[Assistant] 20020513 nCipher Security Advisory #3: MSCAPI CSP Install Wizard


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0939?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0940 mean in the context of cybersecurity?

[Assistant] CVE-2002-0940


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0940.

[Assistant] domesticinstall.exe for nCipher MSCAPI CSP 5.50 and 5.54 does not use Operator Card Set protected keys when the user requests them but does not generate the Operator Card Set, which results in a lower protection level than specified by the user (module protection only).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0940?

[Assistant]
20020617 nCipher Advisory #3: MSCAPI keys erroneously module-protected - update

20020513 nCipher Security Advisory #3: MSCAPI CSP Install Wizard


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0940?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0941 mean in the context of cybersecurity?

[Assistant] CVE-2002-0941


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0941.

[Assistant] The ConsoleCallBack class for nCipher running under JRE 1.4.0 and 1.4.0_01, as used by the TrustedCodeTool and possibly other applications, may leak a passphrase when the user aborts an application that is prompting for the passphrase, which could allow attackers to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0941?

[Assistant] 20020617 nCipher Advisory #4: Console Java apps can leak passphrases on Windows


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0941?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0942 mean in the context of cybersecurity?

[Assistant] CVE-2002-0942


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0942.

[Assistant] Buffer overflows in Lugiment Log Explorer before 3.02 allow attackers with database permissions to execute arbitrary code via long arguments to the extended stored procedures (1) xp_logattach_StartProf, (2) xp_logattach_setport, or (3) xp_logattach.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0942?

[Assistant]
20020614 Lumigent Log Explorer 3.xx extended stored procedures buffer overflow

20020614 Follow-up on Lumigent Log Explorer 3.xx extended stored  procedures buffer  overflow


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0942?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0943 mean in the context of cybersecurity?

[Assistant] CVE-2002-0943


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0943.

[Assistant] MetaCart2.sql stores the user database under the web document root without access controls, which allows remote attackers to obtain sensitive information such as passwords and credit card numbers via a direct request for metacart.mdb.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0943?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0943?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0944 mean in the context of cybersecurity?

[Assistant] CVE-2002-0944


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0944.

[Assistant] Cross-site scripting vulnerability in DeepMetrix LiveStats 5.03 through 6.2.1 allows remote attackers to execute arbitrary script as the LiveStats user via the (1) user-agent or (2) referrer, which are not filtered by the stats program.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0944?

[Assistant] 20020617 DeepMetrix LiveStats javascript injection


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0944?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0945 mean in the context of cybersecurity?

[Assistant] CVE-2002-0945


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0945.

[Assistant] Buffer overflow in SeaNox Devwex allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0945?

[Assistant] 20020608 SeaNox Devwex - Denial of Service and Directory traversal


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0945?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0946 mean in the context of cybersecurity?

[Assistant] CVE-2002-0946


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0946.

[Assistant] Directory traversal vulnerability in SeaNox Devwex before 1.2002.0601 allows remote attackers to read arbitrary files via ..\ (dot dot) sequences in an HTTP request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0946?

[Assistant] 20020608 SeaNox Devwex - Denial of Service and Directory traversal


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0946?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0947 mean in the context of cybersecurity?

[Assistant] CVE-2002-0947


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0947.

[Assistant] Buffer overflow in rwcgi60 CGI program for Oracle Reports Server 6.0.8.18.0 and earlier, as used in Oracle9iAS and other products, allows remote attackers to execute arbitrary code via a long database name parameter.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0947?

[Assistant]
20020612 Oracle Reports Server Buffer Overflow (#NISR12062002B)

20020612 [VulnWatch] Oracle Reports Server Buffer Overflow (#NISR12062002B)


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0947?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0948 mean in the context of cybersecurity?

[Assistant] CVE-2002-0948


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0948.

[Assistant] Scripts For Educators MakeBook 2.2 CGI program allows remote attackers to execute script as other visitors, or execute server-side includes (SSI) as the web server, via the (1) Name or (2) Email parameters, which are not properly filtered.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0948?

[Assistant]
20020612 SSI & CSS execution in MakeBook 2.2

20020613 Re: SSI & CSS execution in MakeBook 2.2


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0948?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0949 mean in the context of cybersecurity?

[Assistant] CVE-2002-0949


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0949.

[Assistant] Telindus 1100 series ADSL router allows remote attackers to gain privileges to the device via a certain packet to UDP port 9833, which generates a reply that includes the router's password and other sensitive information in cleartext.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0949?

[Assistant] 20020605 Some vulnerabilities in the Telindus 11xx router series


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0949?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0950 mean in the context of cybersecurity?

[Assistant] CVE-2002-0950


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0950.

[Assistant] Cross-site scripting vulnerability in TransWARE Active! mail 1.422 and 2.0 allows remote attackers to execute arbitrary code via a certain e-mail header, which is not properly filtered.