Explain the CVE ID: What does the identifier CVE-2002-0312 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0312.

Directory traversal vulnerability in Essentia Web Server 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.


Provide references for further information: Can you share references or external links related to CVE-2002-0312?

{'name': '4160', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4160'}, {'name': '20020221 SecurityOffice Security Advisory:// Essentia Web Server Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101439734827908&w=2'}, {'name': '20020226 SecurityOffice Security Advisory:// Essentia Web Server Vulnerabilities (Vendor Patch)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258365'}, {'name': 'essentia-server-directory-traversal(8248)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8248.php'}, {'name': '20020222 SecurityOffice Security Advisory:// Essentia Web Server Vulnerabilities (Vendor Patch)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0202&L=ntbugtraq&F=P&S=&P=10201'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0312?


Explain the CVE ID: What does the identifier CVE-2002-0313 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0313.

Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long URL.


Provide references for further information: Can you share references or external links related to CVE-2002-0313?

{'name': '20020226 SecurityOffice Security Advisory:// Essentia Web Server Vulnerabilities (Vendor Patch)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258365'}, {'name': '20030704 Essentia Web Server 2.12 (Linux)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006231.html'}, {'name': 'essentia-server-long-request-dos(8249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8249.php'}, {'name': '20020221 SecurityOffice Security Advisory:// Essentia Web Server DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101440530023617&w=2'}, {'name': '4159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4159'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0313?


Explain the CVE ID: What does the identifier CVE-2002-0314 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0314.

fasttrack p2p, as used in (1) KaZaA before 1.5, (2) grokster, and (3) morpheus allows remote attackers to cause a denial of service (memory exhaustion) via a series of client-to-client messages, which pops up new windows per message.


Provide references for further information: Can you share references or external links related to CVE-2002-0314?

{'name': '20020222 Morpheus, Kazaa and Grokster Remote DoS. Also Identity faking vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101441689224760&w=2'}, {'name': 'fasttrack-message-service-dos(8273)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8273.php'}, {'name': '4122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4122'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0314?


Explain the CVE ID: What does the identifier CVE-2002-0315 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0315.

fasttrack p2p, as used in (1) KaZaA, (2) grokster, and (3) morpheus allows remote attackers to spoof other users by modifying the username and network information in the message header.


Provide references for further information: Can you share references or external links related to CVE-2002-0315?

{'name': '20020222 Morpheus, Kazaa and Grokster Remote DoS. Also Identity faking vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101441689224760&w=2'}, {'name': 'fasttrack-message-service-spoof(8272)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8272.php'}, {'name': '4121', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4121'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0315?


Explain the CVE ID: What does the identifier CVE-2002-0316 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0316.

Cross-site scripting vulnerability in eXtreme message board (XMB) 1.6x and earlier allows remote attackers to execute script as other XMB users by inserting the script into an IMG tag.


Provide references for further information: Can you share references or external links related to CVE-2002-0316?

{'name': '20020222 XMB cross-scripting vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101447886404876&w=2'}, {'name': 'xmb-php-css(8262)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8262.php'}, {'name': '4167', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4167'}, {'tags': ['x_refsource_MISC'], 'url': 'https://docs.xmbforum2.com/index.php?title=Security_Issue_History'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0316?


Explain the CVE ID: What does the identifier CVE-2002-0317 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0317.

Gator ActiveX component (IEGator.dll) 3.0.6.1 allows remote web sites to install arbitrary software by specifying a Trojan Gator installation file (setup.ex_) in the src parameter.


Provide references for further information: Can you share references or external links related to CVE-2002-0317?

{'name': '20020220 Gator installer Plugin allows any software to be installed', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101438671922874&w=2'}, {'name': 'gator-activex-install(8266)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8266.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gator.com/update/'}, {'name': '4161', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4161'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0317?


Explain the CVE ID: What does the identifier CVE-2002-0318 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0318.

FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets.


Provide references for further information: Can you share references or external links related to CVE-2002-0318?

{'name': '20020221 DoS Attack against many RADIUS servers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101440113410083&w=2'}, {'name': 'freeradius-access-request-dos(9968)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9968.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0318?


Explain the CVE ID: What does the identifier CVE-2002-0319 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0319.

Cross-site scripting vulnerability in edituser.php for pforum 1.14 and earlier allows remote attackers to execute script and steal cookies from other users via Javascript in a username.


Provide references for further information: Can you share references or external links related to CVE-2002-0319?

{'name': '4165', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4165'}, {'name': 'pforum-username-css(8263)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8263.php'}, {'name': '20020222 pforum: cross-site-scripting bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101446366708757&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0319?


Explain the CVE ID: What does the identifier CVE-2002-0320 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0320.

Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long (1) message or (2) IMvironment field.


Provide references for further information: Can you share references or external links related to CVE-2002-0320?

{'name': '4162', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4162'}, {'name': 'VU#887319', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/887319'}, {'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': '20020221 Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101439616623230&w=2'}, {'name': 'VU#419419', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/419419'}, {'name': 'yahoo-messenger-imvironment-bo(8265)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8265.php'}, {'name': 'yahoo-messenger-message-bo(8264)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8264.php'}, {'name': '4163', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4163'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0320?


Explain the CVE ID: What does the identifier CVE-2002-0321 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0321.

Yahoo! Messenger 5.0 allows remote attackers to spoof other users by modifying the username and using the spoofed username for social engineering or denial of service (flooding) attacks.


Provide references for further information: Can you share references or external links related to CVE-2002-0321?

{'name': 'yahoo-messenger-username-spoof(8267)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8267.php'}, {'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': '20020221 Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101439616623230&w=2'}, {'name': 'VU#952875', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/952875'}, {'name': '4164', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4164'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0321?


Explain the CVE ID: What does the identifier CVE-2002-0322 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0322.

Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing.


Provide references for further information: Can you share references or external links related to CVE-2002-0322?

{'name': '20020223 Re: Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101466489113920&w=2'}, {'name': '4173', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4173'}, {'name': '20020223 Re: Re: Remote crashes in Yahoo messenger', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101467298107635&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0322?


Explain the CVE ID: What does the identifier CVE-2002-0323 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0323.

comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL.


Provide references for further information: Can you share references or external links related to CVE-2002-0323?

{'name': '20020224 ScriptEase:WebServer Edition vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101465709621105&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0323?


Explain the CVE ID: What does the identifier CVE-2002-0324 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0324.

Greymatter 1.21c and earlier with the Bookmarklet feature enabled allows remote attackers to read a cleartext password and gain administrative privileges by guessing the name of a gmrightclick-*.reg file which contains the administrator name and password in cleartext, then retrieving the file from the web server before the Greymatter administrator performs a "Clear And Exit" action.


Provide references for further information: Can you share references or external links related to CVE-2002-0324?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.dangerousmonkey.com/dangblog/dangarch/00000051.htm'}, {'name': '20020224 Greymatter 1.21c and earlier - remote login/pass exposure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101465343308249&w=2'}, {'name': '4169', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4169'}, {'name': 'greymatter-gmrightclick-account-information(8277)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8277.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0324?


Explain the CVE ID: What does the identifier CVE-2002-0325 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0325.

Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.


Provide references for further information: Can you share references or external links related to CVE-2002-0325?

{'name': '20020226 BadBlue Yet Another Directory Traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101474689126219&w=2'}, {'name': 'badblue-dotdotdot-directory-traversal(8295)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8295.php'}, {'name': '4179', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4179'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0325?


Explain the CVE ID: What does the identifier CVE-2002-0326 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0326.

Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains Javascript.


Provide references for further information: Can you share references or external links related to CVE-2002-0326?

{'name': '20020226 BadBlue XSS vulnerabilities / Filesharing Server Worm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101474387016066&w=2'}, {'name': 'badblue-url-css(8294)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8294.php'}, {'name': '4180', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4180'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0326?


Explain the CVE ID: What does the identifier CVE-2002-0327 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0327.

Buffer overflow in Century Software TERM allows local users to gain root privileges via a long tty argument to the callin program.


Provide references for further information: Can you share references or external links related to CVE-2002-0327?

{'name': '4174', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4174'}, {'name': '20020227 Century Software Term Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101477608215471&w=2'}, {'name': '20020222 Censoft TERM Emu bOf', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://online.securityfocus.com/archive/82/257731'}, {'name': 'term-tty-bo(8291)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8291.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0327?


Explain the CVE ID: What does the identifier CVE-2002-0328 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0328.

Cross-site scripting vulnerability in Ikonboard 3.0.1 allows remote attackers to execute arbitrary script as other Ikonboard users and steal cookies via Javascript in an IMG tag.


Provide references for further information: Can you share references or external links related to CVE-2002-0328?

{'name': '20020226 Re: Open Bulletin Board javascript bug.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101475420818274&w=2'}, {'name': '4182', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4182'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0328?


Explain the CVE ID: What does the identifier CVE-2002-0329 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0329.

Cross-site scripting vulnerability in Snitz Forums 2000 3.3.03 and earlier allows remote attackers to execute arbitrary script as other Forums 2000 users via Javascript in an IMG tag.


Provide references for further information: Can you share references or external links related to CVE-2002-0329?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.snitz.com/forum/link.asp?TOPIC_ID=23660'}, {'name': '20020227 RE: Open Bulletin Board javascript bug.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101485184605149&w=2'}, {'name': 'VU#132011', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/132011'}, {'name': '4192', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4192'}, {'name': '20020227 Snitz 2000 Code Patch (was RE: Open Bulletin Board javascript bug.)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258981'}, {'name': 'snitz-img-css(8309)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8309.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0329?


Explain the CVE ID: What does the identifier CVE-2002-0330 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0330.

Cross-site scripting vulnerability in codeparse.php of Open Bulletin Board (OpenBB) 1.0.0 allows remote attackers to execute arbitrary script and steal cookies via Javascript in the IMG tag.


Provide references for further information: Can you share references or external links related to CVE-2002-0330?

{'name': '20020225 Open Bulletin Board  javascript bug.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101466092601554&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://community.iansoft.net/read.php?TID=5159'}, {'name': '4171', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4171'}, {'name': 'openbb-img-css(8278)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8278.php'}, {'name': '5658', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5658'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0330?


Explain the CVE ID: What does the identifier CVE-2002-0331 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0331.

Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2002-0331?

{'name': '4198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4198'}, {'name': 'bpm-http-directory-traversal(8300)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8300.php'}, {'name': '20020227 BPM STUDIO PRO 4.2 DIRECTORY ESCAPE VULNERABILITY', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101486044323352&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0331?


Explain the CVE ID: What does the identifier CVE-2002-0332 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0332.

Buffer overflows in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to execute arbitrary code via (1) a long DNS hostname that is determined using reverse DNS lookups, (2) a long AUTH string, or (3) certain data in the xtell request.


Provide references for further information: Can you share references or external links related to CVE-2002-0332?

{'name': '20020227 Remote exploit against xtelld and other fun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494896516467&w=2'}, {'name': '4193', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4193'}, {'name': 'DSA-121', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-121'}, {'name': 'xtell-bo(8312)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8312.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0332?


Explain the CVE ID: What does the identifier CVE-2002-0333 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0333.

Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with short names, and local users to read more files using a symlink with a short name, via a .. in the TTY argument.


Provide references for further information: Can you share references or external links related to CVE-2002-0333?

{'name': '20020227 Remote exploit against xtelld and other fun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494896516467&w=2'}, {'name': 'DSA-121', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-121'}, {'name': '4194', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4194'}, {'name': 'xtell-tty-directory-traversal(8313)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8313.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0333?


Explain the CVE ID: What does the identifier CVE-2002-0334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0334.

xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows local users to modify files via a symlink attack on the .xtell-log file.


Provide references for further information: Can you share references or external links related to CVE-2002-0334?

{'name': '4197', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4197'}, {'name': '20020227 Remote exploit against xtelld and other fun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494896516467&w=2'}, {'name': 'xtell-log-symlink(8314)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8314.php'}, {'name': 'DSA-121', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-121'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0334?


Explain the CVE ID: What does the identifier CVE-2002-0335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0335.

Buffer overflow in Galacticomm Worldgroup web server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long HTTP GET request.


Provide references for further information: Can you share references or external links related to CVE-2002-0335?

{'name': '4186', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4186'}, {'name': 'worldgroup-http-get-bo(8298)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8298.php'}, {'name': '20020227 LBYTE&SECURITY.NNOV: Buffer overflows in Worldgroup', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101484128203523&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0335?


Explain the CVE ID: What does the identifier CVE-2002-0336 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0336.

Buffer overflow in Galacticomm Worldgroup FTP server 3.20 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a LIST command containing a large number of / (slash), * (wildcard), and .. characters.


Provide references for further information: Can you share references or external links related to CVE-2002-0336?

{'name': 'worldgroup-ftp-list-bo(8297)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8297.php'}, {'name': '4185', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4185'}, {'name': '20020227 LBYTE&SECURITY.NNOV: Buffer overflows in Worldgroup', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101484128203523&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0336?


Explain the CVE ID: What does the identifier CVE-2002-0337 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0337.

RealPlayer 8 allows remote attackers to cause a denial of service (CPU utilization) via malformed .mp3 files.


Provide references for further information: Can you share references or external links related to CVE-2002-0337?

{'name': '4200', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4200'}, {'name': 'realplayer-mp3-invalid-dos(8320)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8320.php'}, {'name': '20020227 2K, with RealPlayer Installed 100 % CPU utilization', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495354424868&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0337?


Explain the CVE ID: What does the identifier CVE-2002-0338 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0338.

The Bat! 1.53d and 1.54beta, and possibly other versions, allows remote attackers to cause a denial of service (crash) via an attachment whose name includes an MS-DOS device name.


Provide references for further information: Can you share references or external links related to CVE-2002-0338?

{'name': 'thebat-msdos-device-dos(8303)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8303.php'}, {'name': '4187', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4187'}, {'name': '20020227 SECURITY.NNOV: Special device access in The Bat!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101483832026841&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0338?


Explain the CVE ID: What does the identifier CVE-2002-0339 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0339.

Cisco IOS 11.1CC through 12.2 with Cisco Express Forwarding (CEF) enabled includes portions of previous packets in the padding of a MAC level packet when the MAC packet's length is less than the IP level packet length.


Provide references for further information: Can you share references or external links related to CVE-2002-0339?

{'name': '20020227 Cisco Security Advisory: Data Leak with Cisco Express Forwarding', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/IOS-CEF-pub.shtml'}, {'name': '4191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4191'}, {'name': 'ios-cef-information-leak(8296)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8296.php'}, {'name': '806', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/806'}, {'name': 'VU#310387', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/310387'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0339?


Explain the CVE ID: What does the identifier CVE-2002-0340 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0340.

Windows Media Player (WMP) 8.00.00.4477, and possibly other versions, automatically detects and executes .wmf and other content, even when the file's extension or content type does not specify .wmf, which could make it easier for attackers to conduct unauthorized activities via Trojan horse files containing .wmf content.


Provide references for further information: Can you share references or external links related to CVE-2002-0340?

{'name': '20020222 Windows Media Player executes WMF content in .MP3 files.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101447771102582&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0340?


Explain the CVE ID: What does the identifier CVE-2002-0341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0341.

GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter.


Provide references for further information: Can you share references or external links related to CVE-2002-0341?

{'name': '20020227 SecurityOffice Security Advisory:// Novell GroupWise Web Access Path Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494830315071&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0341?


Explain the CVE ID: What does the identifier CVE-2002-0342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0342.

Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long.


Provide references for further information: Can you share references or external links related to CVE-2002-0342?

{'name': '20020226 BUG: Kmail client DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101475683425671&w=2'}, {'name': 'kmail-message-body-dos(8283)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8283.php'}, {'name': '4177', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4177'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0342?


Explain the CVE ID: What does the identifier CVE-2002-0343 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0343.

Hotline Client 1.8.5 stores sensitive user information, including passwords, in plaintext in the bookmarks file, which could allow local users with access to the bookmarks file to gain privileges by extracting the passwords.


Provide references for further information: Can you share references or external links related to CVE-2002-0343?

{'name': '4210', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4210'}, {'name': 'hotline-connect-plaintext-password(8327)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8327.php'}, {'name': '20020228 Hotline Client Plain password vuln.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495128121299&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0343?


Explain the CVE ID: What does the identifier CVE-2002-0344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0344.

Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server.


Provide references for further information: Can you share references or external links related to CVE-2002-0344?

{'name': '4170', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4170'}, {'name': 'nav-liveupdate-plaintext-account(8282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8282.php'}, {'name': '20020225 Symantec LiveUpdate', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101466781122312&w=2'}, {'name': '20020228 Re:  "Javier Sanchez" jsanchez157@hotmail.com 02/25/2002 11:14 AM, Symantec', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101496301307285&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0344?


Explain the CVE ID: What does the identifier CVE-2002-0345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0345.

Symantec Ghost 7.0 stores usernames and passwords in plaintext in the NGServer\params registry key, which could allow an attacker to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0345?

{'name': '20020226 RE: Symantec LiveUpdate', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258293'}, {'name': '20020301 Re:  "Peter Miller" pcmiller61@yahoo.com, 02/26/2002 03:48 AM RE:  Symantec', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101529792821615&w=2'}, {'name': 'ghost-plaintext-account(8305)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8305.php'}, {'name': '4181', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4181'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0345?


Explain the CVE ID: What does the identifier CVE-2002-0346 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0346.

Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.


Provide references for further information: Can you share references or external links related to CVE-2002-0346?

{'name': 'cobalt-raq-css(8321)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8321.php'}, {'name': '20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495944202452&w=2'}, {'name': '4211', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4211'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0346?


Explain the CVE ID: What does the identifier CVE-2002-0347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0347.

Directory traversal vulnerability in Cobalt RAQ 4 allows remote attackers to read password-protected files, and possibly files outside the web root, via a .. (dot dot) in an HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2002-0347?

{'name': '20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495944202452&w=2'}, {'name': '4208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4208'}, {'name': 'cobalt-raq-directory-traversal(8322)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8322.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0347?


Explain the CVE ID: What does the identifier CVE-2002-0348 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0348.

service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.


Provide references for further information: Can you share references or external links related to CVE-2002-0348?

{'name': '4209', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4209'}, {'name': '20020228 Colbalt-RAQ-v4-Bugs&Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101495944202452&w=2'}, {'name': 'cobalt-raq-service-dos(8323)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8323.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0348?


Explain the CVE ID: What does the identifier CVE-2002-0349 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0349.

Tiny Personal Firewall (TPF) 2.0.15, under certain configurations, will pop up an alert to the system even when the screen is locked, which could allow an attacker with physical access to the machine to hide activities or bypass access restrictions.


Provide references for further information: Can you share references or external links related to CVE-2002-0349?

{'name': 'tinyfw-popup-gain-access(8324)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8324.php'}, {'name': '20020228 ... Tiny Personal Firewall ...', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101494587110288&w=2'}, {'name': '4207', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4207'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0349?


Explain the CVE ID: What does the identifier CVE-2002-0350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0350.

HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service.


Provide references for further information: Can you share references or external links related to CVE-2002-0350?

{'name': '20020301 DoS on HP ProCurve 4000M switch (possibly others)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101500123900612&w=2'}, {'name': '4212', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4212'}, {'name': 'hp-procurve-portscan-dos(8329)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8329.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0350?


Explain the CVE ID: What does the identifier CVE-2002-0351 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0351.

Buffer overflows in CFS daemon (cfsd) before 1.3.3-8.1, and 1.4x before 1.4.1-5, allow remote attackers to cause a denial of service and possibly execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2002-0351?

{'name': 'DSA-116', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-116'}, {'name': '4219', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4219'}, {'name': 'cfs-bo(8330)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8330.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0351?


Explain the CVE ID: What does the identifier CVE-2002-0352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0352.

Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication.


Provide references for further information: Can you share references or external links related to CVE-2002-0352?

{'name': 'phorum-admin-users-information(8344)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8344.php'}, {'name': '4226', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4226'}, {'name': '20020302 Phorum Discussion Board Security Bug (Email Disclosure)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101508207206900&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0352?


Explain the CVE ID: What does the identifier CVE-2002-0353 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0353.

The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, which causes Ethereal to allocate memory incorrectly, possibly due to zero-length fields.


Provide references for further information: Can you share references or external links related to CVE-2002-0353?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00003.html'}, {'name': '4604', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4604'}, {'name': 'CLA-2002:474', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000474'}, {'name': 'RHSA-2002:088', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-088.html'}, {'name': 'ethereal-asn1-dos(8952)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8952.php'}, {'name': 'DSA-130', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-130'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0353?


Explain the CVE ID: What does the identifier CVE-2002-0354 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0354.

The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property.


Provide references for further information: Can you share references or external links related to CVE-2002-0354?

{'name': '20020430 Reading local files in Netscape 6 and Mozilla (GM#001-NS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102017952204097&w=2'}, {'name': '20020430 Reading local files in Netscape 6 and Mozilla (GM#001-NS)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=102020343728766&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0354?


Explain the CVE ID: What does the identifier CVE-2002-0355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0355.

netstat in SGI IRIX before 6.5.12 allows local users to determine the existence of files on the system, even if the users do not have the appropriate permissions.


Provide references for further information: Can you share references or external links related to CVE-2002-0355?

{'name': '4682', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4682'}, {'name': '20020503-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020503-01-I'}, {'name': 'irix-netstat-file-existence(9023)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9023.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0355?


Explain the CVE ID: What does the identifier CVE-2002-0356 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0356.

Vulnerability in XFS filesystem reorganizer (fsr_xfs) in SGI IRIX 6.5.10 and earlier allows local users to gain root privileges by overwriting critical system files.


Provide references for further information: Can you share references or external links related to CVE-2002-0356?

{'name': '20020504-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020504-01-I'}, {'name': '4706', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4706'}, {'name': 'irix-fsrxfs-gain-privileges(9042)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9042.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0356?


Explain the CVE ID: What does the identifier CVE-2002-0357 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0357.

Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0357?

{'name': '20020601-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020601-01-P'}, {'name': 'M-087', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/m-087.shtml'}, {'name': 'irix-rpcpasswd-gain-privileges(9261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9261.php'}, {'name': '4939', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4939'}, {'name': 'VU#430419', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/430419'}, {'name': '834', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/834'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0357?


Explain the CVE ID: What does the identifier CVE-2002-0358 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0358.

MediaMail and MediaMail Pro in SGI IRIX 6.5.16 and earlier allows local users to force the program to dump core via certain arguments, which could allow the users to read sensitive data or gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0358?

{'name': '4959', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4959'}, {'name': '20020602-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020602-01-I'}, {'name': 'irix-mediamail-core-dump(9292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9292.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0358?


Explain the CVE ID: What does the identifier CVE-2002-0359 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0359.

xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0359?

{'name': '20020606-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020606-01-I'}, {'name': '20020620 [LSD] IRIX rpc.xfsmd multiple remote root vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102459162909825&w=2'}, {'name': 'irix-xfsmd-bypass-authentication(9401)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9401.php'}, {'name': '5072', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5072'}, {'name': 'VU#521147', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/521147'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0359?


Explain the CVE ID: What does the identifier CVE-2002-0360 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0360.

Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program.


Provide references for further information: Can you share references or external links related to CVE-2002-0360?

{'name': 'sun-answerbook2-gettransbitmap-bo(9117)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9117.php'}, {'name': '20020520 [VulnWatch] eSecurityOnline advisory 5063 - Sun AnswerBook2 gettransbitmap buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://marc.info/?l=vulnwatch&m=102194510509450&w=2'}, {'name': '20020520 eSecurityOnline advisory 5063 - Sun AnswerBook2 gettransbitmap buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102198846905064&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.eSecurityOnline.com/advisories/eSO5063.asp'}, {'name': '4784', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4784'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0360?


Explain the CVE ID: What does the identifier CVE-2002-0362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0362.

Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711.


Provide references for further information: Can you share references or external links related to CVE-2002-0362?

{'name': 'aim-addexternalapp-bo(9017)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9017.php'}, {'name': '20020506 w00w00 on AOL Instant Messenger remote overflow #2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102071080509955&w=2'}, {'name': '4677', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4677'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0362?


Explain the CVE ID: What does the identifier CVE-2002-0363 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0363.

ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.


Provide references for further information: Can you share references or external links related to CVE-2002-0363?

{'name': 'RHSA-2003:209', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-209.html'}, {'name': '4937', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4937'}, {'name': 'CSSA-2002-026.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-026.0.txt'}, {'name': 'ghostscript-postscript-command-execution(9254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9254.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ghostscript.com/pipermail/gs-code-review/2002-February/001900.html'}, {'name': 'RHSA-2002:083', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-083.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ghostscript.com/pipermail/gs-code-review/2002-January/001801.html'}, {'name': 'RHSA-2002:123', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-123.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0363?


Explain the CVE ID: What does the identifier CVE-2002-0364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0364.

Buffer overflow in the chunked encoding transfer mechanism in IIS 4.0 and 5.0 allows attackers to execute arbitrary code via the processing of HTR request sessions, aka "Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise."


Provide references for further information: Can you share references or external links related to CVE-2002-0364?

{'name': '4855', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4855'}, {'name': 'MS02-028', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-028'}, {'name': 'VU#313819', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/313819'}, {'name': '20020612 ADVISORY: Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=102392308608100&w=2'}, {'name': 'iis-htr-chunked-encoding-bo(9327)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9327.php'}, {'name': '20020613 VNA - .HTR HEAP OVERFLOW', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/276767'}, {'name': '20020612 ADVISORY: Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow [AD20020612]', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0099.html'}, {'name': 'oval:org.mitre.oval:def:182', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A182'}, {'name': '20020612 ADVISORY: Windows 2000 and NT4 IIS .HTR Remote Buffer Overflow [AD20020612]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102392069305962&w=2'}, {'name': 'oval:org.mitre.oval:def:29', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A29'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0364?


Explain the CVE ID: What does the identifier CVE-2002-0366 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0366.

Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to execute arbitrary code by modifying the rasphone.pbk file to use a long dial-up entry.


Provide references for further information: Can you share references or external links related to CVE-2002-0366?

{'name': 'oval:org.mitre.oval:def:63', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A63'}, {'name': '20020613 Microsoft RASAPI32.DLL', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/276776'}, {'name': 'oval:org.mitre.oval:def:61', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A61'}, {'name': '20020620 VPN and Q318138', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/278145'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/vna/ms-ras.txt'}, {'name': '4852', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4852'}, {'name': 'MS02-029', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-029'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0366?


Explain the CVE ID: What does the identifier CVE-2002-0367 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0367.

smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.


Provide references for further information: Can you share references or external links related to CVE-2002-0367?

{'name': '20020326 Re: DebPloit (exploit)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/264441'}, {'name': '20020314 DebPloit (exploit)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=101614320402695&w=2'}, {'name': '4287', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4287'}, {'name': 'MS02-024', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-024'}, {'name': '20020327 Local Security Vulnerability in Windows NT and Windows 2000', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/264927'}, {'name': 'oval:org.mitre.oval:def:76', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A76'}, {'name': '20020314 Fwd: DebPloit (exploit)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/262074'}, {'name': 'win-debug-duplicate-handles(8462)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8462.php'}, {'name': 'oval:org.mitre.oval:def:158', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A158'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0367?


Explain the CVE ID: What does the identifier CVE-2002-0368 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0368.

The Store Service in Microsoft Exchange 2000 allows remote attackers to cause a denial of service (CPU consumption) via a mail message with a malformed RFC message attribute, aka "Malformed Mail Attribute can Cause Exchange 2000 to Exhaust CPU Resources."


Provide references for further information: Can you share references or external links related to CVE-2002-0368?

{'name': 'exchange-msg-attribute-dos(9195)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9195.php'}, {'name': 'MS02-025', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-025'}, {'name': '4881', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4881'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0368?


Explain the CVE ID: What does the identifier CVE-2002-0369 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0369.

Buffer overflow in ASP.NET Worker Process allows remote attackers to cause a denial of service (restart) and possibly execute arbitrary code via a routine that processes cookies while in StateServer mode.


Provide references for further information: Can you share references or external links related to CVE-2002-0369?

{'name': '4958', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4958'}, {'name': 'ms-aspdotnet-stateserver-bo(9276)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9276.php'}, {'name': 'MS02-026', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-026'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0369?


Explain the CVE ID: What does the identifier CVE-2002-0370 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0370.

Buffer overflow in the ZIP capability for multiple products allows remote attackers to cause a denial of service or execute arbitrary code via ZIP files containing entries with long filenames, including (1) Microsoft Windows 98 with Plus! Pack, (2) Windows XP, (3) Windows ME, (4) Lotus Notes R4 through R6 (pre-gold), (5) Verity KeyView, and (6) Stuffit Expander before 7.0.


Provide references for further information: Can you share references or external links related to CVE-2002-0370?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info.apple.com/usen/security/security_updates.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info-zip.org/FAQ.html'}, {'name': 'win-zip-decompression-bo(10251)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10251.php'}, {'name': '20021002 R7-0004: Multiple Vendor Long ZIP Entry Filename Processing Issues', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0009.html'}, {'name': '587', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/587'}, {'name': '20021002 R7-0004: Multiple Vendor Long ZIP Entry Filename Processing Issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103428193409223&w=2'}, {'name': 'VU#383779', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/383779'}, {'name': 'MS02-054', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-054'}, {'name': '5873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5873'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0370?


Explain the CVE ID: What does the identifier CVE-2002-0371 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0371.

Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a gopher:// URL that redirects the user to a real or simulated gopher server that sends a long response.


Provide references for further information: Can you share references or external links related to CVE-2002-0371?

{'name': '4930', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4930'}, {'name': 'ie-gopher-bo(9247)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9247.php'}, {'name': '20020604 Buffer overflow in MSIE gopher code', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102320516707940&w=2'}, {'name': '20020613 Microsoft releases critical fix that breaks their own software!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102397955217618&w=2'}, {'name': 'oval:org.mitre.oval:def:98', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A98'}, {'name': 'VU#440275', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/440275'}, {'name': 'MS02-027', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-027'}, {'name': '20020613 Flawed workaround in MS02-027 -- gopher can run on _any_ port, not just 70', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/276848'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.pivx.com/workaround_fail.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0371?


Explain the CVE ID: What does the identifier CVE-2002-0372 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0372.

Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's (IE) security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the "Cache Path Disclosure via Windows Media Player".


Provide references for further information: Can you share references or external links related to CVE-2002-0372?

{'name': '5107', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5107'}, {'name': 'oval:org.mitre.oval:def:281', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281'}, {'name': 'MS02-032', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032'}, {'name': 'mediaplayer-cache-code-execution(9420)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9420.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0372?


Explain the CVE ID: What does the identifier CVE-2002-0373 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0373.

The Windows Media Device Manager (WMDM) Service in Microsoft Windows Media Player 7.1 on Windows 2000 systems allows local users to obtain LocalSystem rights via a program that calls the WMDM service to connect to an invalid local storage device, aka "Privilege Elevation through Windows Media Device Manager Service".


Provide references for further information: Can you share references or external links related to CVE-2002-0373?

{'name': 'mediaplayer-wmdm-privilege-elevation(9421)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9421.php'}, {'name': '5109', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5109'}, {'name': 'MS02-032', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0373?


Explain the CVE ID: What does the identifier CVE-2002-0374 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0374.

Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name.


Provide references for further information: Can you share references or external links related to CVE-2002-0374?

{'name': '4679', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4679'}, {'name': 'CSSA-2002-041.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-041.0.txt'}, {'name': 'RHSA-2002:084', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-084.html'}, {'name': 'RHSA-2002:141', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-141.html'}, {'name': 'RHSA-2002:180', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-180.html'}, {'name': '20020506 ldap vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0053.html'}, {'name': 'RHSA-2002:175', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-175.html'}, {'name': 'MDKSA-2002:075', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075'}, {'name': '20021030 GLSA: pam_ldap', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103601912505261&w=2'}, {'name': 'pamldap-config-format-string(9018)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9018.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0374?


Explain the CVE ID: What does the identifier CVE-2002-0375 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0375.

Cross-site scripting vulnerability in sgdynamo.exe for Sgdynamo allows remote attackers to execute arbitrary Javascript via a URL with the script in the HTNAME parameter.


Provide references for further information: Can you share references or external links related to CVE-2002-0375?

{'name': '20020417 Smalls holes on 5 products #1', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101908986415768&w=2'}, {'name': '20020510 Fix available for Sgdynamo', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102107488402057&w=2'}, {'name': 'sgdynamo-htname-parameter-xss(9830)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9830'}, {'name': '3458', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3458'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0375?


Explain the CVE ID: What does the identifier CVE-2002-0376 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0376.

Buffer overflow in Apple QuickTime 5.0 ActiveX component allows remote attackers to execute arbitrary code via a long pluginspage field.


Provide references for further information: Can you share references or external links related to CVE-2002-0376?

{'name': 'A091002-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2002/a091002-1.txt'}, {'name': '5685', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5685'}, {'name': '20020925 Fwd: QuickTime for Windows ActiveX security advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/293095'}, {'name': 'quicktime-activex-pluginspage-bo(10077)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10077.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0376?


Explain the CVE ID: What does the identifier CVE-2002-0377 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0377.

Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by reading authentication information from the files.


Provide references for further information: Can you share references or external links related to CVE-2002-0377?

{'name': '20020512 Gaim abritary Email Reading', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102130733815285&w=2'}, {'name': '4730', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4730'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gaim.sourceforge.net/ChangeLog'}, {'name': '20020511 Gaim abritary Email Reading', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0584.html'}, {'name': 'gaim-email-access(9061)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9061.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0377?


Explain the CVE ID: What does the identifier CVE-2002-0378 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0378.

The default configuration of LPRng print spooler in Red Hat Linux 7.0 through 7.3, Mandrake 8.1 and 8.2, and other operating systems, accepts print jobs from arbitrary remote hosts.


Provide references for further information: Can you share references or external links related to CVE-2002-0378?

{'name': 'RHSA-2002:089', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-089.html'}, {'name': 'MDKSA-2002:042', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-042.php'}, {'name': '4980', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4980'}, {'name': 'HPSBTL0206-048', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4205'}, {'name': 'lprng-remote-jobs-dos(9322)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9322.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0378?


Explain the CVE ID: What does the identifier CVE-2002-0379 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0379.

Buffer overflow in University of Washington imap server (uw-imapd) imap-2001 (imapd 2001.315) and imap-2001a (imapd 2001.315) with legacy RFC 1730 support, and imapd 2000.287 and earlier, allows remote authenticated users to execute arbitrary code via a long BODY request.


Provide references for further information: Can you share references or external links related to CVE-2002-0379?

{'name': 'ESA-20020607-013', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-2120.html'}, {'name': '4713', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4713'}, {'name': '20020510 wu-imap buffer overflow condition', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102107222100529&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.washington.edu/imap/buffer.html'}, {'name': 'RHSA-2002:092', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-092.html'}, {'name': 'wuimapd-authenticated-user-bo(10803)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10803'}, {'name': 'CLA-2002:487', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000487'}, {'name': 'HPSBTL0205-043', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4167'}, {'name': 'CSSA-2002-021.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-021.0.txt'}, {'name': 'wuimapd-partial-mailbox-bo(9055)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9055.php'}, {'name': 'MDKSA-2002:034', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-034.php'}, {'name': 'VU#961489', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/961489'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0379?


Explain the CVE ID: What does the identifier CVE-2002-0380 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0380.

Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet.


Provide references for further information: Can you share references or external links related to CVE-2002-0380?

{'name': 'CSSA-2002-025.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-025.0.txt'}, {'name': 'RHSA-2002:121', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-121.html'}, {'name': '4890', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4890'}, {'name': 'FreeBSD-SA-02:29', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'http://marc.info/?l=bugtraq&m=102650721503642&w=2'}, {'name': 'tcpdump-nfs-bo(9216)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9216.php'}, {'name': 'RHSA-2003:214', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-214.html'}, {'name': 'DSA-255', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-255'}, {'name': '20020606 TSLSA-2002-0055 - tcpdump', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102339541014226&w=2'}, {'name': 'CLA-2002:491', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000491'}, {'name': 'RHSA-2002:094', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-094.html'}, {'name': 'HPSBTL0205-044', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4169'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0380?


Explain the CVE ID: What does the identifier CVE-2002-0381 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0381.

The TCP implementation in various BSD operating systems (tcp_input.c) does not properly block connections to broadcast addresses, which could allow remote attackers to bypass intended filters via packets with a unicast link layer address and an IP broadcast address.


Provide references for further information: Can you share references or external links related to CVE-2002-0381?

{'name': '20030604-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030604-01-I'}, {'name': '20020317 TCP Connections to a Broadcast Address on BSD-Based Systems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/262733'}, {'name': '4309', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4309'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvsweb.netbsd.org/bsdweb.cgi/syssrc/sys/netinet/tcp_input.c.diff?r1=1.136&r2=1.137'}, {'name': 'bsd-broadcast-address(8485)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8485.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet/tcp_input.c.diff?r1=1.109&r2=1.110'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.FreeBSD.org/cgi/query-pr.cgi?pr=35022'}, {'name': '5308', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5308'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0381?


Explain the CVE ID: What does the identifier CVE-2002-0382 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0382.

XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters.


Provide references for further information: Can you share references or external links related to CVE-2002-0382?

{'name': 'RHSA-2002:097', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-097.html'}, {'name': 'xchat-dns-execute-commands(8704)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8704.php'}, {'name': 'RHSA-2002:124', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-124.html'}, {'name': 'CLA-2002:526', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000526'}, {'name': 'MDKSA-2002:051', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-051.php'}, {'name': '4376', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4376'}, {'name': '20020327 Xchat /dns command execution vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101725430425490&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0382?


Explain the CVE ID: What does the identifier CVE-2002-0384 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0384.

Buffer overflow in Jabber plug-in for Gaim client before 0.58 allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2002-0384?

{'name': 'RHSA-2002:107', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-107.html'}, {'name': 'HPSBTL0208-057', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4358'}, {'name': 'RHSA-2002:122', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-122.html'}, {'name': '5406', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5406'}, {'name': '3729', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3729'}, {'name': 'RHSA-2002:098', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-098.html'}, {'name': 'RHSA-2003:156', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-156.html'}, {'name': 'MDKSA-2002:054', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:054'}, {'name': 'gaim-jabber-module-bo(9766)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9766.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0384?


Explain the CVE ID: What does the identifier CVE-2002-0385 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0385.

Vignette Story Server 4.1 and 6.0 allows remote attackers to obtain sensitive information via a request that contains a large number of '"' (double quote) and and '>' characters, which causes the TCL interpreter to crash and include stack data in the output.


Provide references for further information: Can you share references or external links related to CVE-2002-0385?

{'name': 'storyserver-tcl-information-disclosure(11725)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11725'}, {'name': 'A040703-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a040703-1.txt'}, {'name': '7296', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7296'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0385?


Explain the CVE ID: What does the identifier CVE-2002-0386 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0386.

The administration module for Oracle Web Cache in Oracle9iAS (9i Application Suite) 9.0.2 allows remote attackers to cause a denial of service (crash) via (1) an HTTP GET request containing a ".." (dot dot) sequence, or (2) a malformed HTTP GET request with a chunked Transfer-Encoding with missing data.


Provide references for further information: Can you share references or external links related to CVE-2002-0386?

{'name': 'oracle-appserver-webcachemanager-dos(10284)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10284.php'}, {'name': 'A102802-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2002/a102802-1.txt'}, {'name': '5902', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5902'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2002alert43rev1.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0386?


Explain the CVE ID: What does the identifier CVE-2002-0387 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0387.

Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL.


Provide references for further information: Can you share references or external links related to CVE-2002-0387?

{'name': 'N-064', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-064.shtml'}, {'name': 'A031303-1', 'tags': ['vendor-advisory', 'x_refsource_ATSTAKE'], 'url': 'http://www.atstake.com/research/advisories/2003/a031303-1.txt'}, {'name': 'sunone-gxnsapi6-bo(11529)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11529'}, {'name': '7082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7082'}, {'name': '52022', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/52022'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0387?


Explain the CVE ID: What does the identifier CVE-2002-0388 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0388.

Cross-site scripting vulnerabilities in Mailman before 2.0.11 allow remote attackers to execute script via (1) the admin login page, or (2) the Pipermail index summaries.


Provide references for further information: Can you share references or external links related to CVE-2002-0388?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://mail.python.org/pipermail/mailman-announce/2002-May/000042.html'}, {'name': '4826', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4826'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0388?


Explain the CVE ID: What does the identifier CVE-2002-0389 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0389.

Pipermail in Mailman stores private mail messages with predictable filenames in a world-executable directory, which allows local users to read private mailing list archives.


Provide references for further information: Can you share references or external links related to CVE-2002-0389?

{'name': 'RHSA-2015:1417', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2015-1417.html'}, {'name': '4538', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4538'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id=103'}, {'name': 'pipermail-view-archives(8874)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8874.php'}, {'name': '20020417 Mailman/Pipermail private mailing list/local user vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101902003314968&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0389?


Explain the CVE ID: What does the identifier CVE-2002-0390 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0390.


Provide references for further information: Can you share references or external links related to CVE-2002-0390?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0390?


Explain the CVE ID: What does the identifier CVE-2002-0391 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0391.

Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.