[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0064.

[Assistant] Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0064?

[Assistant] {'name': '4458', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4458'}, {'name': 'funk-proxy-insecure-permissions(8791)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8791.php'}, {'name': "20020408 Unauthorized remote control access to systems running Funk Software's Proxy v3.x", 'tags': ['vendor-advisory', 'x_refsource_BINDVIEW'], 'url': 'http://razor.bindview.com/publish/advisories/adv_FunkProxy.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0064?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0065 mean in the context of cybersecurity?

[Assistant] CVE-2002-0065


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0065.

[Assistant] Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0065?

[Assistant] {'name': 'funk-proxy-weak-password(8792)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8792.php'}, {'name': '4459', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4459'}, {'name': "20020408 Unauthorized remote control access to systems running Funk Software's Proxy v3.x", 'tags': ['vendor-advisory', 'x_refsource_BINDVIEW'], 'url': 'http://razor.bindview.com/publish/advisories/adv_FunkProxy.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0065?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0066 mean in the context of cybersecurity?

[Assistant] CVE-2002-0066


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0066.

[Assistant] Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0066?

[Assistant] {'name': 'funk-proxy-named-pipe(8793)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8793.php'}, {'name': '4460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4460'}, {'name': "20020408 Unauthorized remote control access to systems running Funk Software's Proxy v3.x", 'tags': ['vendor-advisory', 'x_refsource_BINDVIEW'], 'url': 'http://razor.bindview.com/publish/advisories/adv_FunkProxy.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0066?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0067 mean in the context of cybersecurity?

[Assistant] CVE-2002-0067


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0067.

[Assistant] Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0067?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.4/bugs/'}, {'name': 'CLA-2002:464', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464'}, {'name': 'MDKSA-2002:016', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php'}, {'name': '20020222 TSLSA-2002-0031 - squid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101443252627021&w=2'}, {'name': 'FreeBSD-SA-02:12', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc'}, {'name': 'CSSA-2002-SCO.7', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html'}, {'name': 'squid-htcp-enabled(8261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8261.php'}, {'name': '4150', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4150'}, {'name': '20020221 Squid HTTP Proxy Security Update Advisory 2002:1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101431040422095&w=2'}, {'name': 'RHSA-2002:029', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-029.html'}, {'name': '5379', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5379'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0067?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0068 mean in the context of cybersecurity?

[Assistant] CVE-2002-0068


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0068.

[Assistant] Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0068?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.4/bugs/'}, {'name': 'CLA-2002:464', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464'}, {'name': 'SuSE-SA:2002:008', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_008_squid_txt.html'}, {'name': 'MDKSA-2002:016', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php'}, {'name': '20020222 Squid buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101440163111826&w=2'}, {'name': '20020222 TSLSA-2002-0031 - squid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101443252627021&w=2'}, {'name': 'FreeBSD-SA-02:12', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc'}, {'name': 'CSSA-2002-SCO.7', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html'}, {'name': '20020221 Squid HTTP Proxy Security Update Advisory 2002:1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101431040422095&w=2'}, {'name': 'RHSA-2002:029', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-029.html'}, {'name': 'CSSA-2002-010.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/CSSA-2002-010.0.txt'}, {'name': '5378', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5378'}, {'name': 'squid-ftpbuildtitleurl-bo(8258)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8258.php'}, {'name': '4148', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4148'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0068?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0069 mean in the context of cybersecurity?

[Assistant] CVE-2002-0069


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0069.

[Assistant] Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0069?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.4/bugs/'}, {'name': 'CLA-2002:464', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464'}, {'name': 'MDKSA-2002:016', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php'}, {'name': '20020222 TSLSA-2002-0031 - squid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101443252627021&w=2'}, {'name': 'FreeBSD-SA-02:12', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc'}, {'name': 'CSSA-2002-SCO.7', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html'}, {'name': 'squid-snmp-dos(8260)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8260.php'}, {'name': '20020221 Squid HTTP Proxy Security Update Advisory 2002:1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101431040422095&w=2'}, {'name': 'RHSA-2002:029', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-029.html'}, {'name': '4146', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4146'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0069?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0070 mean in the context of cybersecurity?

[Assistant] CVE-2002-0070


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0070.

[Assistant] Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0070?

[Assistant] {'name': 'MS02-014', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-014'}, {'name': '20020311 ADVISORY: Windows Shell Overflow', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0203&L=ntbugtraq&F=P&S=&P=2404'}, {'name': '20020312 ADVISORY: Windows Shell Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101594127017290&w=2'}, {'name': '4248', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4248'}, {'name': 'oval:org.mitre.oval:def:147', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A147'}, {'name': 'oval:org.mitre.oval:def:18', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18'}, {'name': 'win-shell-bo(8384)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8384.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0070?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0071 mean in the context of cybersecurity?

[Assistant] CVE-2002-0071


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0071.

[Assistant] Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0071?

[Assistant] {'name': 'oval:org.mitre.oval:def:45', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A45'}, {'name': 'oval:org.mitre.oval:def:130', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A130'}, {'name': '3325', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3325'}, {'name': 'A041002-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2002/a041002-1.txt'}, {'name': '20020411 KPMG-2002010: Microsoft IIS .htr ISAPI buffer overrun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101854087828265&w=2'}, {'name': '4474', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4474'}, {'name': 'VU#363715', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/363715'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': 'iis-htr-isapi-bo(8799)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8799.php'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0071?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0072 mean in the context of cybersecurity?

[Assistant] CVE-2002-0072


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0072.

[Assistant] The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0072?

[Assistant] {'name': '4479', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4479'}, {'name': 'VU#521059', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/521059'}, {'name': 'iis-isapi-filter-error-dos(8800)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8800.php'}, {'name': '20020411 KPMG-2002009: Microsoft IIS W3SVC Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101853851025208&w=2'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': '3326', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3326'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0072?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0073 mean in the context of cybersecurity?

[Assistant] CVE-2002-0073


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0073.

[Assistant] The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0073?

[Assistant] {'name': 'iis-ftp-session-status-dos(8801)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8801.php'}, {'name': '20020417 Microsoft FTP Service STAT Globbing DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101901273810598&w=2'}, {'name': 'VU#412203', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/412203'}, {'name': '20020416 [VulnWatch] Microsoft FTP Service STAT Globbing DoS', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0023.html'}, {'name': 'oval:org.mitre.oval:def:24', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A24'}, {'name': '3328', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3328'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': 'oval:org.mitre.oval:def:35', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A35'}, {'name': '4482', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4482'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.digitaloffense.net/msftpd/advisory.txt'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0073?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0074 mean in the context of cybersecurity?

[Assistant] CVE-2002-0074


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0074.

[Assistant] Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0074?

[Assistant] {'name': '20020410 Cgisecurity Advisory #9: Novell Websearch, and Microsoft IIS XSS Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2002/Apr/0126.html'}, {'name': 'VU#883091', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/883091'}, {'name': '4483', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4483'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cgisecurity.com/advisory/9.txt'}, {'name': 'oval:org.mitre.oval:def:46', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A46'}, {'name': '3338', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3338'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': 'iis-help-file-css(8802)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8802.php'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0074?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0075 mean in the context of cybersecurity?

[Assistant] CVE-2002-0075


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0075.

[Assistant] Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0075?

[Assistant] {'name': '20020411 [SNS Advisory No.49] A Possibility of Internet Information Server/Services Cross Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101854677802990&w=2'}, {'name': '4487', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4487'}, {'name': '3341', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3341'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': 'iis-redirected-url-error-css(8804)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8804.php'}, {'name': 'oval:org.mitre.oval:def:58', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A58'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': 'VU#520707', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/520707'}, {'name': 'oval:org.mitre.oval:def:210', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A210'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0075?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0076 mean in the context of cybersecurity?

[Assistant] CVE-2002-0076


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0076.

[Assistant] Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0076?

[Assistant] {'name': 'MS02-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013'}, {'name': 'java-vm-verifier-variant(8480)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8480.php'}, {'name': '4313', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4313'}, {'name': '00218', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/218'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0076?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0077 mean in the context of cybersecurity?

[Assistant] CVE-2002-0077


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0077.

[Assistant] Microsoft Internet Explorer 5.01, 5.5 and 6.0 treats objects invoked on an HTML page with the codebase property as part of Local Computer zone, which allows remote attackers to invoke executables present on the local system through objects such as the popup object, aka the "Local Executable Invocation via Object tag" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0077?

[Assistant] {'name': 'MS02-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015'}, {'name': '20020113 Internet Explorer Pop-Up OBJECT Tag Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101103188711920&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0077?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0078 mean in the context of cybersecurity?

[Assistant] CVE-2002-0078


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0078.

[Assistant] The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0078?

[Assistant] {'name': 'MS02-015', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-015'}, {'name': 'ie-cookie-local-zone(8701)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8701.php'}, {'name': '3029', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3029'}, {'name': 'oval:org.mitre.oval:def:96', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A96'}, {'name': '4392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4392'}, {'name': '20020330 IE: Remote webpage can script in local zone', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101781180528301&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0078?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0079 mean in the context of cybersecurity?

[Assistant] CVE-2002-0079


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0079.

[Assistant] Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0079?

[Assistant] {'name': 'oval:org.mitre.oval:def:25', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A25'}, {'name': 'VU#610291', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/610291'}, {'name': 'oval:org.mitre.oval:def:16', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16'}, {'name': '4485', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4485'}, {'name': 'MS02-018', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-018'}, {'name': '20020410 Windows 2000 and NT4 IIS .ASP Remote Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101846993304518&w=2'}, {'name': 'iis-asp-chunked-encoding-bo(8795)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8795.php'}, {'name': 'CA-2002-09', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-09.html'}, {'name': '20020415 Microsoft IIS Vulnerabilities in Cisco Products - MS02-018', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Microsoft-IIS-vulnerabilities-MS02-018.shtml'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0079?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0080 mean in the context of cybersecurity?

[Assistant] CVE-2002-0080


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0080.

[Assistant] rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0080?

[Assistant] {'name': 'linux-rsync-inherit-privileges(8463)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8463.php'}, {'name': 'MDKSA-2002:024', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3'}, {'name': 'CSSA-2002-014.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt'}, {'name': '4285', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4285'}, {'name': 'RHSA-2002:026', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-026.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0080?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0081 mean in the context of cybersecurity?

[Assistant] CVE-2002-0081


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0081.

[Assistant] Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0081?

[Assistant] {'name': 'VU#297363', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/297363'}, {'name': 'MDKSA-2002:017', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-017.php'}, {'name': '20020225 Re: Rumours about Apache 1.3.22 exploits', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101468694824998&w=2'}, {'name': 'php-file-upload-overflow(8281)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8281.php'}, {'name': 'HPSBTL0203-028', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3911'}, {'name': '20020227 Advisory 012002: PHP remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101484705523351&w=2'}, {'name': 'DSA-115', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-115'}, {'name': '20020228 TSLSA-2002-0033 - mod_php', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101497256024338&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.php.net/downloads.php'}, {'name': 'CA-2002-05', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-05.html'}, {'name': 'CLA-2002:468', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000468'}, {'name': '4183', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4183'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/012002.html'}, {'name': 'ESA-20020301-006', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-1924.html'}, {'name': 'SuSE-SA:2002:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_007_mod_php4_txt.html'}, {'name': '20020227 PHP remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101484975231922&w=2'}, {'name': 'RHSA-2002:035', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-035.html'}, {'name': 'RHSA-2002:040', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-040.html'}, {'name': '20020304 Apache+php Proof of Concept Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101537076619812&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0081?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0082 mean in the context of cybersecurity?

[Assistant] CVE-2002-0082


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0082.

[Assistant] The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which allows remote attackers to use a buffer overflow to execute arbitrary code via a large client certificate that is signed by a trusted Certificate Authority (CA), which produces a large serialized session.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0082?

[Assistant] {'name': 'CSSA-2002-011.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2002-011.0.txt'}, {'name': '4189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4189'}, {'name': 'RHSA-2002:045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-045.html'}, {'name': 'HPSBUX0204-190', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/4008'}, {'name': '20020301 Apache-SSL buffer overflow (fix available)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101518491916936&w=2'}, {'name': '20020227 mod_ssl Buffer Overflow Condition (Update Available)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258646'}, {'name': 'MDKSA-2002:020', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-020.php'}, {'name': 'ESA-20020301-005', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-1923.html'}, {'name': '20020304 Apache-SSL 1.3.22+1.47 - update to security fix', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101528358424306&w=2'}, {'name': 'RHSA-2002:042', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-042.html'}, {'name': 'apache-modssl-bo(8308)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8308.php'}, {'name': 'RHSA-2002:041', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-041.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apacheweek.com/issues/02-03-01#security'}, {'name': 'SSRT0817', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://ftp.support.compaq.com/patches/.new/html/SSRT0817.shtml'}, {'name': 'CLA-2002:465', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000465'}, {'name': 'HPSBTL0203-031', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/3965'}, {'name': 'DSA-120', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-120'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/153567/Apache-mod_ssl-OpenSSL-Remote-Buffer-Overflow.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0082?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0083 mean in the context of cybersecurity?

[Assistant] CVE-2002-0083


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0083.

[Assistant] Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0083?

[Assistant] {'name': '20020311 TSLSA-2002-0039 - openssh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-03/0108.html'}, {'name': 'CSSA-2002-SCO.10', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.10/CSSA-2002-SCO.10.txt'}, {'name': '730', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/730'}, {'name': '4241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4241'}, {'name': '20020308 [OpenPKG-SA-2002.002] OpenPKG Security Advisory (openssh)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101561384821761&w=2'}, {'name': 'CSSA-2002-SCO.11', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.11/CSSA-2002-SCO.11.txt'}, {'name': 'HPSBTL0203-029', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3960'}, {'name': 'DSA-119', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-119'}, {'name': 'SuSE-SA:2002:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_009_openssh_txt.html'}, {'name': 'CSSA-2002-012.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.calderasystems.com/support/security/advisories/CSSA-2002-012.0.txt'}, {'name': '20020310 OpenSSH 2.9.9p2 packages for Immunix 6.2 with latest fix', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101586991827622&w=2'}, {'name': 'ESA-20020307-007', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-1937.html'}, {'name': 'CLA-2002:467', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000467'}, {'name': 'NetBSD-SA2002-004', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-004.txt.asc'}, {'name': 'FreeBSD-SA-02:13', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:13.openssh.asc'}, {'name': '20020307 OpenSSH Security Advisory (adv.channelalloc)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101553908201861&w=2'}, {'name': '20020307 [PINE-CERT-20020301] OpenSSH off-by-one', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101552065005254&w=2'}, {'name': 'MDKSA-2002:019', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-019.php'}, {'name': 'RHSA-2002:043', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-043.html'}, {'name': 'openssh-channel-error(8383)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8383.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openbsd.org/advisories/ssh_channelalloc.txt'}, {'name': '20020328 OpenSSH channel_lookup() off by one exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/264657'}, {'name': '20020307 [VulnWatch] [PINE-CERT-20020301] OpenSSH off-by-one', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0060.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0083?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0084 mean in the context of cybersecurity?

[Assistant] CVE-2002-0084


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0084.

[Assistant] Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argument.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0084?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309'}, {'name': 'VU#161931', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/161931'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4198.asp'}, {'name': '20020429 eSecurityOnline Security Advisory 4198 - Sun Solaris cachefsd mount file buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00416.html'}, {'name': 'oval:org.mitre.oval:def:43', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A43'}, {'name': 'oval:org.mitre.oval:def:97', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A97'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0084?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0085 mean in the context of cybersecurity?

[Assistant] CVE-2002-0085


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0085.

[Assistant] cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0085?

[Assistant] {'name': 'solaris-cachefsd-rpc-dos(8956)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8956'}, {'name': 'oval:org.mitre.oval:def:4329', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4329'}, {'name': '20020429 eSecurityOnline Security Advisory 4197 - Sun Solaris cachefsd denial of service vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0047.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4197.asp'}, {'name': '4634', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4634'}, {'name': '20020429 eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270122'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0085?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0086 mean in the context of cybersecurity?

[Assistant] CVE-2002-0086


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0086.

[Assistant] Buffer overflow in bindsock in Lotus Domino 5.0.4 and 5.0.7 on Linux allows local users to gain root privileges via a long (1) Notes_ExecDirectory or (2) PATH environment variable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0086?

[Assistant] {'name': 'lotus-domino-path-bo(8585)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8585'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4124.asp'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21100441'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21095569'}, {'name': '4319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4319'}, {'name': 'lotus-domino-notes-execdirectory-bo(8583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8583'}, {'name': '4317', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4317'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4126.asp'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0086?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0087 mean in the context of cybersecurity?

[Assistant] CVE-2002-0087


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0087.

[Assistant] bindsock in Lotus Domino 5.07 on Solaris allows local users to create arbitrary files via a symlink attack on temporary files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0087?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4125.asp'}, {'name': '4318', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4318'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=0&uid=swg21095671'}, {'name': 'lotus-domino-tmpfile-symlink(8586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8586'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0087?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0088 mean in the context of cybersecurity?

[Assistant] CVE-2002-0088


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0088.

[Assistant] Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0088?

[Assistant] {'name': 'oval:org.mitre.oval:def:48', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A48'}, {'name': 'oval:org.mitre.oval:def:60', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A60'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO4123.asp'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0088?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0089 mean in the context of cybersecurity?

[Assistant] CVE-2002-0089


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0089.

[Assistant] Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option, or (2) the PRODVERS argument in the .cdtoc file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0089?

[Assistant] {'name': 'solaris-admintool-prodvers-bo(8955)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8955.php'}, {'name': 'solaris-admintool-d-bo(8954)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8954.php'}, {'name': 'oval:org.mitre.oval:def:67', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A67'}, {'name': '4624', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4624'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO2397.asp'}, {'name': '20020429 eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270122'}, {'name': 'oval:org.mitre.oval:def:68', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A68'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0089?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0090 mean in the context of cybersecurity?

[Assistant] CVE-2002-0090


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0090.

[Assistant] Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0090?

[Assistant] {'name': 'oval:org.mitre.oval:def:179', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A179'}, {'name': '44842', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/44842'}, {'name': 'solaris-lbxproxy-display-bo(8958)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8958.php'}, {'name': '20020429 eSecurityOnline Security Advisory 3761 - Sun Solaris lbxproxy display name buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270149'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO3761.asp'}, {'name': 'VU#188507', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/188507'}, {'name': '4633', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4633'}, {'name': 'oval:org.mitre.oval:def:86', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A86'}, {'name': '20020429 [VulnWatch] eSecurityOnline Security Advisory 3761 - Sun Solaris lbxproxy display name buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0041.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0090?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0091 mean in the context of cybersecurity?

[Assistant] CVE-2002-0091


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0091.

[Assistant] Multiple CGI scripts in CIDER SHADOW 1.5 and 1.6 allows remote attackers to execute arbitrary commands via certain form fields.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0091?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://www.esecurityonline.com/advisories/eSO2408.asp'}, {'name': 'shadow-cgi-execute-commands(8953)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8953.php'}, {'name': '4625', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4625'}, {'name': '20020429 eSecurityOnline Security Advisory 2408 - CIDER SHADOW CGI', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0400.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0091?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0092 mean in the context of cybersecurity?

[Assistant] CVE-2002-0092


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0092.

[Assistant] CVS before 1.10.8 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (server crash) via the diff capability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0092?

[Assistant] {'name': '4234', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4234'}, {'name': '20020220 Help needed with bufferoverflow in cvs', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101422243817321&w=2'}, {'name': '20020220 Re: [Fwd: Help needed with bufferoverflow in cvs]', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101433077724524&w=2'}, {'name': 'RHSA-2002:026', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-026.html'}, {'name': 'cvs-global-var-dos(8366)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8366.php'}, {'name': 'DSA-117', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-117'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0092?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0093 mean in the context of cybersecurity?

[Assistant] CVE-2002-0093


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0093.

[Assistant] Buffer overflow in ipcs for HP Tru64 UNIX 4.0f through 5.1a may allow attackers to execute arbitrary code, a different vulnerability than CVE-2001-0423.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0093?

[Assistant] {'name': 'VU#771155', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/771155'}, {'name': 'tru64-ipcs-bo(9613)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9613.php'}, {'name': 'SSRT2275', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/compaq/2002-q3/0010.html'}, {'name': 'SSRT0794U', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/compaq/2002-q3/0010.html'}, {'name': '5241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5241'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0093?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0094 mean in the context of cybersecurity?

[Assistant] CVE-2002-0094


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0094.

[Assistant] config_converters.py in BSCW (Basic Support for Cooperative Work) 3.x and versions before 4.06 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name during filename conversion.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0094?

[Assistant] {'name': '20020102 BSCW: Vulnerabilities and Problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/248000'}, {'name': '3776', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3776'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bscw.gmd.de/WhatsNew.html'}, {'name': 'bscw-remote-shell-execution(7774)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7774.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0094?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0095 mean in the context of cybersecurity?

[Assistant] CVE-2002-0095


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0095.

[Assistant] The default configuration of BSCW (Basic Support for Cooperative Work) 3.x and possibly version 4 enables user self registration, which could allow remote attackers to upload files and possibly join a user community that was intended to be closed.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0095?

[Assistant] {'name': '20020102 BSCW: Vulnerabilities and Problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/248000'}, {'name': '3777', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3777'}, {'name': 'bscw-default-installation-registration(7775)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7775.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0095?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0096 mean in the context of cybersecurity?

[Assistant] CVE-2002-0096


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0096.

[Assistant] The installation of Geeklog 1.3 creates an extra group_assignments record which is not properly deleted, which causes the first newly created user to be added to the GroupAdmin and UserAdmin groups, which could provide that user with administrative privileges that were not intended.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0096?

[Assistant] {'name': 'geeklog-default-admin-privileges(7780)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7780.php'}, {'name': '3783', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3783'}, {'name': '20020103 Vulnerability in new user creation in Geeklog 1.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/248367'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://geeklog.sourceforge.net/index.php?topic=Security'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0096?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0097 mean in the context of cybersecurity?

[Assistant] CVE-2002-0097


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0097.

[Assistant] Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0097?

[Assistant] {'name': 'geeklog-modify-auth-cookie(7869)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7869.php'}, {'name': '3844', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3844'}, {'name': '20020110 Cookie modification allows unauthenticated user login in Geeklog 1.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249443'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://geeklog.sourceforge.net/index.php?topic=Security'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0097?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0098 mean in the context of cybersecurity?

[Assistant] CVE-2002-0098


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0098.

[Assistant] Buffer overflow in index.cgi administration interface for Boozt! Standard 0.9.8 allows local users to execute arbitrary code via a long name field when creating a new banner.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0098?

[Assistant] {'name': 'boozt-long-name-bo(7790)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7790.php'}, {'name': '3787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3787'}, {'name': "20020105 BOOZT! Standard 's administration cgi vulnerable to buffer overflow", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101027773404836&w=2'}, {'name': '20020109 BOOZT! Standard CGI Vulnerability : Exploit Released', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249219'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.boozt.com/news_detail.php?id=3'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0098?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0099 mean in the context of cybersecurity?

[Assistant] CVE-2002-0099


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0099.

[Assistant] Buffer overflow in Michael Lamont Savant Web Server 3.0 allows remote attackers to cause a denial of service (crash) via a long HTTP request to the cgi-bin directory in which the CGI program name contains a large number of . (dot) characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0099?

[Assistant] {'name': '3788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3788'}, {'name': '20020109 Savant Webserver Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101062823305479&w=2'}, {'name': '20020105 Savant Webserver Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101027722904078&w=2'}, {'name': 'savant-long-parameter-bo(7786)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7786.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0099?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0100 mean in the context of cybersecurity?

[Assistant] CVE-2002-0100


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0100.

[Assistant] AOL AOLserver 3.4.2 Win32 allows remote attackers to bypass authentication and read password-protected files via a URL that directly references the file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0100?

[Assistant] {'name': '20020106 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0005.html'}, {'name': '20020106 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101038936305397&w=2'}, {'name': '20020109 AOLserver 3.4.2 Unauthorized File Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101062823205474&w=2'}, {'name': 'aolserver-protected-file-access(7825)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7825.php'}, {'name': '3791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3791'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0100?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0101 mean in the context of cybersecurity?

[Assistant] CVE-2002-0101


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0101.

[Assistant] Microsoft Internet Explorer 6.0 and earlier allows local users to cause a denial of service via an infinite loop for modeless dialogs showModelessDialog, which causes CPU usage while the focus for the dialog is not released.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0101?

[Assistant] {'name': '3789', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3789'}, {'name': '20020106 Internet Explorer Javascript Modeless Popup Local Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101039104608083&w=2'}, {'name': 'ie-modeless-dialog-dos(7826)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7826.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0101?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0102 mean in the context of cybersecurity?

[Assistant] CVE-2002-0102


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0102.

[Assistant] Oracle9iAS Web Cache 2.0.0.x allows remote attackers to cause a denial of service via (1) a request to TCP ports 1100, 4000, 4001, and 4002 with a large number of null characters, and (2) a request to TCP port 4000 with a large number of "." characters.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0102?

[Assistant] {'name': '3760', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3760'}, {'name': 'oracle-appserver-null-dos(7765)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7765'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/webcache2.pdf'}, {'name': '3762', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3762'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0102?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0103 mean in the context of cybersecurity?

[Assistant] CVE-2002-0103


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0103.

[Assistant] An installer program for Oracle9iAS Web Cache 2.0.0.x creates executable and configuration files with insecure permissions, which allows local users to gain privileges by (1) running webcached or (2) obtaining the administrator password from webcache.xml.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0103?

[Assistant] {'name': '20020107 [PTL-2002-01] Vulnerabilities in Oracle9iAS Web Cache', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101041510727937&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/webcache2.pdf'}, {'name': '3764', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3764'}, {'name': '3761', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3761'}, {'name': 'oracle-appserver-webcached-privileges(7766)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7766.php'}, {'name': 'oracle-appserver-webcache-password(7768)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7768.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0103?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0104 mean in the context of cybersecurity?

[Assistant] CVE-2002-0104


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0104.

[Assistant] AFTPD 5.4.4 allows remote attackers to gain sensitive information via a CD (CWD) ~ (tilde) command, which causes a core dump.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0104?

[Assistant] {'name': 'aftpd-crash-core-dump(7832)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7832.php'}, {'name': '20020107 Aftpd core dump vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101041333323486&w=2'}, {'name': '3806', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3806'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0104?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0105 mean in the context of cybersecurity?

[Assistant] CVE-2002-0105


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0105.

[Assistant] CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0105?

[Assistant] {'name': '3818', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3818'}, {'name': '20020108 CDE bug in Unixware 7.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101060400802428&w=2'}, {'name': 'unixware-dtlogin-log-symlink(7864)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7864.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0105?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0106 mean in the context of cybersecurity?

[Assistant] CVE-2002-0106


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0106.

[Assistant] BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0106?

[Assistant] {'name': 'weblogic-dos-jsp-dos(7808)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7808.php'}, {'name': '20020108 KPMG-2002003: Bea Weblogic DOS-device Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101050440629269&w=2'}, {'name': '3816', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3816'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0106?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0107 mean in the context of cybersecurity?

[Assistant] CVE-2002-0107


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0107.

[Assistant] Web administration interface in CacheFlow CacheOS 4.0.13 and earlier allows remote attackers to obtain sensitive information via a series of GET requests that do not end in with HTTP/1.0 or another version string, which causes the information to be leaked in the error message.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0107?

[Assistant] {'name': '3841', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3841'}, {'name': '20020108 svindel.net security advisory - web admin vulnerability in CacheOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101052887431488&w=2'}, {'name': '20020205 RE: svindel.net security advisory - web admin vulnerability in Ca cheOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/254167'}, {'name': 'cachos-insecure-web-interface(7835)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7835.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0107?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0108 mean in the context of cybersecurity?

[Assistant] CVE-2002-0108


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0108.

[Assistant] Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0108?

[Assistant] {'name': 'allaire-forums-message-spoofing(7841)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7841.php'}, {'name': '20020108 Allaire Forums Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249026'}, {'name': '3827', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3827'}, {'name': 'VU#575619', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/575619'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0108?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0109 mean in the context of cybersecurity?

[Assistant] CVE-2002-0109


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0109.

[Assistant] Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0109?

[Assistant] {'name': '3795', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3795'}, {'name': '3797', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3797'}, {'name': 'linksys-etherfast-default-snmp(7827)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7827.php'}, {'name': "20020106 Linksys 'routers', SNMP issues", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101039288111680&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0109?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0110 mean in the context of cybersecurity?

[Assistant] CVE-2002-0110


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0110.

[Assistant] Nevrona Designs MiraMail 1.04 and earlier stores authentication information such as POP usernames and passwords in plaintext in a .ini file, which allows an attacker to gain privileges by reading the passwords from the file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0110?

[Assistant] {'name': 'VU#245707', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/245707'}, {'name': 'miramail-plaintext-auth-info(7855)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7855.php'}, {'name': '3843', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3843'}, {'name': '20020109 MiraMail 1.04 can give POP account access and details', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101063476715154&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0110?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0111 mean in the context of cybersecurity?

[Assistant] CVE-2002-0111


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0111.

[Assistant] Directory traversal vulnerability in Funsoft Dino's Webserver 1.2 and earlier allows remote attackers to read files or execute arbitrary commands via a .. (dot dot) in the URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0111?

[Assistant] {'name': '3861', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3861'}, {'name': "20020109 File Transversal Vulnerability in Dino's WebServer", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101062213627501&w=2'}, {'name': 'dinos-webserver-directory-traversal(7853)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7853.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0111?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0112 mean in the context of cybersecurity?

[Assistant] CVE-2002-0112


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0112.

[Assistant] Etype Eserv 2.97 allows remote attackers to view password protected files via /./ in the URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0112?

[Assistant] {'name': '20020109 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0010.html'}, {'name': '20020109 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101062823505486&w=2'}, {'name': '3838', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3838'}, {'name': '20020109 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101062172226812&w=2'}, {'name': '20020111 Eserv 2.97 Password Protected File Arbitrary Read Access Vulnerability (Solution)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249734'}, {'name': 'eserv-protected-file-access(7849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7849.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0112?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0113 mean in the context of cybersecurity?

[Assistant] CVE-2002-0113


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0113.

[Assistant] EMC NetWorker (formerly Legato NetWorker) before 7.0 stores log files in the /nsr/logs/ directory with world-readable permissions, which allows local users to read sensitive information and possibly gain privileges.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0113?

[Assistant] {'name': '20020110 Legato Vulnerable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249420'}, {'name': '3840', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3840'}, {'name': 'legato-nsrd-log-permissions(7897)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7897.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0113?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0114 mean in the context of cybersecurity?

[Assistant] CVE-2002-0114


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0114.

[Assistant] EMC NetWorker (formerly Legato NetWorker) before 7.0 stores passwords in plaintext in the daemon.log file, which allows local users to gain privileges by reading the password from the file.  NOTE: this was originally reported for Legato NetWorker 6.1 on the Solaris 7 platform.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0114?

[Assistant] {'name': 'legato-nsrd-log-plaintext(7898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7898.php'}, {'name': '20020110 Legato Vulnerable', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249420'}, {'name': '3842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3842'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0114?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0115 mean in the context of cybersecurity?

[Assistant] CVE-2002-0115


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0115.

[Assistant] Snort 1.8.3 does not properly define the minimum ICMP header size, which allows remote attackers to cause a denial of service (crash and core dump) via a malformed ICMP packet.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0115?

[Assistant] {'name': '3849', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3849'}, {'name': '20020110 Snort core dumped', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249340'}, {'name': '2022', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2022'}, {'name': '20020110 Re: Snort core dumped', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/cgi-bin/archive.pl?id=1&start=2002-03-08&end=2002-03-14&mid=249623&threads=1'}, {'name': 'snort-icmp-dos(7874)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7874.php'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0115?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0116 mean in the context of cybersecurity?

[Assistant] CVE-2002-0116


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0116.

[Assistant] Palm OS 3.5h and possibly other versions, as used in Handspring Visor and Xircom products, allows remote attackers to cause a denial of service via a TCP connect scan, e.g. from nmap.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0116?

[Assistant] {'name': '20020110 Re: Handspring Visor D.O.S', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101070523119956&w=2'}, {'name': 'palmos-nmap-dos(7865)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7865.php'}, {'name': '3847', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3847'}, {'name': '20020110 Handspring Visor D.O.S', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101069677929208&w=2'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0116?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0117 mean in the context of cybersecurity?

[Assistant] CVE-2002-0117


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0117.

[Assistant] Cross-site scripting vulnerability in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 and earlier allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0117?

[Assistant] {'name': '20020108 CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249031'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.yabbforum.com/'}, {'name': 'yabb-encoded-css(7840)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7840.php'}, {'name': '3828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3828'}, {'name': '2019', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2019'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0117?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2002-0118 mean in the context of cybersecurity?

[Assistant] CVE-2002-0118


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0118.

[Assistant] Cross-site scripting vulnerability in Infopop Ultimate Bulletin Board (UBB) 6.2.0 Beta Release 1.0 allows remote attackers to execute arbitrary script and steal cookies via a message containing encoded Javascript in an IMG tag.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2002-0118?

[Assistant] {'name': '20020108 CSS vulnerabilities in YaBB and UBB allow account hijack [Multiple Vendor]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/249031'}, {'name': 'ultimatebb-encoded-css(7838)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7838.php'}, {'name': '3829', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3829'}