Provide references for further information: Can you share references or external links related to CVE-2002-1149?

{'name': '20020924 Information Disclosure with Invision Board installation (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103290602609197&w=2'}, {'name': 'invision-phpinfo-information-disclosure(10178)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10178.php'}, {'name': '3356', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3356'}, {'name': '5789', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5789'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1149?


Explain the CVE ID: What does the identifier CVE-2002-1150 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1150.

The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396) allows attackers with physical access to hijack remote sessions by entering certain logoff or shutdown sequences (such as CTRL-ALT-DEL) and canceling out of the resulting user confirmation prompts, such as when the remote user is editing a document.


Provide references for further information: Can you share references or external links related to CVE-2002-1150?

{'name': '5715', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5715'}, {'name': 'netmeeting-rds-session-hijacking(10119)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10119.php'}, {'name': '20020913 NetMeeting 3.01 Local RDS Session Hijacking', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103228375116204&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1150?


Explain the CVE ID: What does the identifier CVE-2002-1151 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1151.

The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains.


Provide references for further information: Can you share references or external links related to CVE-2002-1151?

{'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20020908-2.txt'}, {'name': 'ie-sameoriginpolicy-bypass(10039)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10039.php'}, {'name': 'MDKSA-2002:064', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-064.php'}, {'name': 'DSA-167', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-167'}, {'name': 'RHSA-2002:221', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-221.html'}, {'name': 'CLA-2002:525', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000525'}, {'name': '5689', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5689'}, {'name': '7867', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7867'}, {'name': 'CSSA-2002-047.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt'}, {'name': '20020910 KDE Security Advisory: Konqueror Cross Site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103175850925395&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1151?


Explain the CVE ID: What does the identifier CVE-2002-1152 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1152.

Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing.


Provide references for further information: Can you share references or external links related to CVE-2002-1152?

{'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20020908-1.txt'}, {'name': '5691', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5691'}, {'name': '20020910 KDE Security Advisory: Secure Cookie Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103175827225044&w=2'}, {'name': 'kde-konqueror-cookie-hijacking(10083)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10083.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1152?


Explain the CVE ID: What does the identifier CVE-2002-1153 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1153.

IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".


Provide references for further information: Can you share references or external links related to CVE-2002-1153?

{'name': '2092', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2092'}, {'name': '5749', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5749'}, {'name': '20020919 KPMG-2002035: IBM Websphere Large Header DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103244572803950&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt'}, {'name': 'websphere-host-header-bo(10140)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10140.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1153?


Explain the CVE ID: What does the identifier CVE-2002-1154 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1154.

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.


Provide references for further information: Can you share references or external links related to CVE-2002-1154?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.analog.cx/security5.html'}, {'name': 'RHSA-2002:059', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-059.html'}, {'name': 'analog-anlgform-dos(10344)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10344.php'}, {'name': '3779', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3779'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1154?


Explain the CVE ID: What does the identifier CVE-2002-1155 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1155.

Buffer overflow in KON kon2 0.3.9b and earlier allows local users to execute arbitrary code via a long -Coding command line argument.


Provide references for further information: Can you share references or external links related to CVE-2002-1155?

{'name': '20030616 Next kon2root  - Redhat 9', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105577912106710&w=2'}, {'name': 'RHSA-2003:050', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-050.html'}, {'name': 'MDKSA-2003:064', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:064'}, {'name': 'RHSA-2003:047', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-047.html'}, {'name': '20030603 kon2_exploit!!', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=105474080512376&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1155?


Explain the CVE ID: What does the identifier CVE-2002-1156 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1156.

Apache 2.0.42 allows remote attackers to view the source code of a CGI script via a POST request to a directory with both WebDAV and CGI enabled.


Provide references for further information: Can you share references or external links related to CVE-2002-1156?

{'name': 'HPSBUX0210-224', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4617'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apacheweek.com/issues/02-10-04'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apache.org/dist/httpd/CHANGES_2.0'}, {'name': 'VU#910713', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/910713'}, {'name': 'apache-webdav-cgi-source(10499)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10499'}, {'name': '6065', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6065'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1156?


Explain the CVE ID: What does the identifier CVE-2002-1157 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1157.

Cross-site scripting vulnerability in the mod_ssl Apache module 2.8.9 and earlier, when UseCanonicalName is off and wildcard DNS is enabled, allows remote attackers to execute script as other web site visitors, via the server name in an HTTPS response on the SSL port, which is used in a self-referencing URL, a different vulnerability than CAN-2002-0840.


Provide references for further information: Can you share references or external links related to CVE-2002-1157?

{'name': '20021026 GLSA: mod_ssl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0374.html'}, {'name': 'RHSA-2002:243', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-243.html'}, {'name': '6029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6029'}, {'name': 'RHSA-2002:222', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-222.html'}, {'name': 'RHSA-2003:106', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-106.html'}, {'name': 'RHSA-2002:251', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-251.html'}, {'name': 'DSA-181', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-181'}, {'name': '2107', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2107'}, {'name': 'ESA-20021029-027', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-2512.html'}, {'name': 'apache-modssl-host-xss(10457)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10457.php'}, {'name': 'MDKSA-2002:072', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-072.php'}, {'name': '20021023 [OpenPKG-SA-2002.010] OpenPKG Security Advisory (apache)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/296753'}, {'name': 'CLA-2002:541', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000541'}, {'name': 'RHSA-2002:248', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-248.html'}, {'name': 'RHSA-2002:244', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-244.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1157?


Explain the CVE ID: What does the identifier CVE-2002-1158 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1158.

Buffer overflow in the irw_through function for Canna 3.5b2 and earlier allows local users to execute arbitrary code as the bin user.


Provide references for further information: Can you share references or external links related to CVE-2002-1158?

{'name': 'DSA-224', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-224'}, {'name': '6351', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6351'}, {'name': 'canna-irwthrough-bo(10831)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10831'}, {'name': 'RHSA-2002:246', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-246.html'}, {'name': 'RHSA-2002:261', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-261.html'}, {'name': '20021220 GLSA: canna', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104041812206344&w=2'}, {'name': 'RHSA-2003:115', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-115.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://canna.sourceforge.jp/sec/Canna-2002-01.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1158?


Explain the CVE ID: What does the identifier CVE-2002-1159 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1159.

Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.


Provide references for further information: Can you share references or external links related to CVE-2002-1159?

{'name': 'DSA-224', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-224'}, {'name': '6354', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6354'}, {'name': 'RHSA-2002:246', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-246.html'}, {'name': 'RHSA-2002:261', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-261.html'}, {'name': 'canna-improper-request-validation(10832)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10832'}, {'name': 'RHSA-2003:115', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-115.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://canna.sourceforge.jp/sec/Canna-2002-01.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1159?


Explain the CVE ID: What does the identifier CVE-2002-1160 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1160.

The default configuration of the pam_xauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by stealing the cookies from a temporary .xauth file, which is created with the original user's credentials after root uses su.


Provide references for further information: Can you share references or external links related to CVE-2002-1160?

{'name': 'VU#911505', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/911505'}, {'name': '55760', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55760'}, {'name': 'CLA-2003:693', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000693'}, {'name': '20021214 BDT_AV200212140001: Insecure default: Using pam_xauth for su from sh-utils package', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104431622818954&w=2'}, {'name': 'linux-pamxauth-gain-privileges(11254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11254.php'}, {'name': 'RHSA-2003:035', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-035.html'}, {'name': 'RHSA-2003:028', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-028.html'}, {'name': '6753', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6753'}, {'name': 'MDKSA-2003:017', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:017'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1160?


Explain the CVE ID: What does the identifier CVE-2002-1161 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1161.


Provide references for further information: Can you share references or external links related to CVE-2002-1161?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1161?


Explain the CVE ID: What does the identifier CVE-2002-1165 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1165.

Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after (1) "||" sequences or (2) "/" characters, which are not properly filtered or verified.


Provide references for further information: Can you share references or external links related to CVE-2002-1165?

{'name': 'RHSA-2003:073', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-073.html'}, {'name': 'CLA-2002:532', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000532'}, {'name': 'NetBSD-SA2002-023', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-023.txt.asc'}, {'name': '20021001 iDEFENSE Security Advisory 10.01.02: Sendmail smrsh bypass vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103350914307274&w=2'}, {'name': 'sendmail-forward-bypass-smrsh(10232)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10232.php'}, {'name': 'MDKSA-2002:083', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2002:083'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sendmail.org/smrsh.adv.txt'}, {'name': '5845', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5845'}, {'name': '7826', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7826'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1165?


Explain the CVE ID: What does the identifier CVE-2002-1166 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1166.

Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request.


Provide references for further information: Can you share references or external links related to CVE-2002-1166?

{'name': '5831', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5831'}, {'name': '20020930 iDEFENSE Security Advisory 09.30.2002: Buffer Overflow in WN Server', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0138.html'}, {'name': '9836', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/9836'}, {'name': '20020930 iDEFENSE Security Advisory 09.30.2002: Buffer Overflow in WN Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103340145725050&w=2'}, {'name': 'wn-server-get-bo(10223)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10223.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1166?


Explain the CVE ID: What does the identifier CVE-2002-1167 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1167.

Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP GET request.


Provide references for further information: Can you share references or external links related to CVE-2002-1167?

{'name': '6000', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6000'}, {'name': 'ibm-wte-html-xss(10453)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10453.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1167?


Explain the CVE ID: What does the identifier CVE-2002-1168 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1168.

Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via an HTTP request that contains an Location: header with a "%0a%0d" (CRLF) sequence, which echoes the Location as an HTTP header in the server response.


Provide references for further information: Can you share references or external links related to CVE-2002-1168?

{'name': 'ibm-wte-header-injection(10454)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10454.php'}, {'name': '6001', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6001'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1168?


Explain the CVE ID: What does the identifier CVE-2002-1169 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1169.

IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to cause a denial of service (crash) via an HTTP request to helpout.exe with a missing HTTP version number, which causes ibmproxy.exe to crash.


Provide references for further information: Can you share references or external links related to CVE-2002-1169?

{'name': 'ibm-wte-helpout-dos(10452)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10452.php'}, {'name': 'IY35970', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY35970&apar=only'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/advisories/R7-0007.txt'}, {'name': '6002', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6002'}, {'name': '2090', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2090'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1169?


Explain the CVE ID: What does the identifier CVE-2002-1170 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1170.

The handle_var_requests function in snmp_agent.c for the SNMP daemon in the Net-SNMP (formerly ucd-snmp) package 5.0.1 through 5.0.5 allows remote attackers to cause a denial of service (crash) via a NULL dereference.


Provide references for further information: Can you share references or external links related to CVE-2002-1170?

{'name': 'RHSA-2002:228', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-228.html'}, {'name': 'netsnmp-handlevarrequests-dos(10250)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10250'}, {'name': '5862', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5862'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.02.02.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=216532'}, {'name': '20021002 iDEFENSE Security Advisory 10.02.2002: Net-SNMP DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103359362020365&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1170?


Explain the CVE ID: What does the identifier CVE-2002-1174 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1174.

Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly processed by the readheaders function, or (2) via long Received: headers, which are not properly parsed by the parse_received function.


Provide references for further information: Can you share references or external links related to CVE-2002-1174?

{'name': 'MDKSA-2002:063', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php'}, {'name': '5827', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5827'}, {'name': '20020929 Advisory 03/2002: Fetchmail remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103340148625187&w=2'}, {'name': '5825', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5825'}, {'name': 'RHSA-2002:215', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-215.html'}, {'name': 'fetchmail-multidrop-bo(10203)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10203.php'}, {'name': 'CLA-2002:531', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531'}, {'name': 'ESA-20021003-023', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-2402.html'}, {'name': 'DSA-171', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-171'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1174?


Explain the CVE ID: What does the identifier CVE-2002-1175 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1175.

The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote attackers to cause a denial of service (crash) when Fetchmail attempts to read data beyond the expected boundary.


Provide references for further information: Can you share references or external links related to CVE-2002-1175?

{'name': 'MDKSA-2002:063', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-063.php'}, {'name': '20020929 Advisory 03/2002: Fetchmail remote vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103340148625187&w=2'}, {'name': 'RHSA-2002:215', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-215.html'}, {'name': 'fetchmail-multidrop-bo(10203)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10203.php'}, {'name': 'CLA-2002:531', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000531'}, {'name': 'ESA-20021003-023', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-2402.html'}, {'name': '5826', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5826'}, {'name': 'DSA-171', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-171'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1175?


Explain the CVE ID: What does the identifier CVE-2002-1176 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1176.

Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file.


Provide references for further information: Can you share references or external links related to CVE-2002-1176?

{'name': '20021219 Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104025874209567&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1176?


Explain the CVE ID: What does the identifier CVE-2002-1177 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1177.

Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long (1) Artist or (2) Album ID3v2 tag.


Provide references for further information: Can you share references or external links related to CVE-2002-1177?

{'name': '6429', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6429'}, {'name': '20021219 Foundstone Research Labs Advisory - Multiple Exploitable Buffer Overflows in Winamp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104025874209567&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1177?


Explain the CVE ID: What does the identifier CVE-2002-1178 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1178.

Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.


Provide references for further information: Can you share references or external links related to CVE-2002-1178?

{'name': 'jetty-cgiservlet-directory-traversal(10246)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10246.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.westpoint.ltd.uk/advisories/wp-02-0011.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://groups.yahoo.com/group/jetty-announce/message/45'}, {'name': '5852', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5852'}, {'name': '20021002 wp-02-0011: Jetty CGIServlet Arbitrary Command Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103358725813039&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1178?


Explain the CVE ID: What does the identifier CVE-2002-1179 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1179.

Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message.


Provide references for further information: Can you share references or external links related to CVE-2002-1179?

{'name': 'MS02-058', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-058'}, {'name': '5944', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5944'}, {'name': '20021010 Re: Problems applying MS02-058', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103429681123297&w=2'}, {'name': '20021010 Outlook Express Remote Code Execution in Preview Pane (S/MIME)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103429637822920&w=2'}, {'name': '20021010 Outlook Express Remote Code Execution in Preview Pane (S/MIME)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103435413105661&w=2'}, {'name': 'outlook-smime-bo(10338)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10338.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1179?


Explain the CVE ID: What does the identifier CVE-2002-1180 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1180.

A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only write permissions to upload malicious .COM files, aka "Script Source Access Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2002-1180?

{'name': 'N-011', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-011.shtml'}, {'name': '6068', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6068'}, {'name': 'MS02-062', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062'}, {'name': 'oval:org.mitre.oval:def:931', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A931'}, {'name': '6071', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6071'}, {'name': 'iis-script-source-access-bypass(10504)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10504.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1180?


Explain the CVE ID: What does the identifier CVE-2002-1181 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1181.

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web pages for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allow remote attackers to execute HTML script as other users through (1) a certain ASP file in the IISHELP virtual directory, or (2) possibly other unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2002-1181?

{'name': 'iis-admin-pages-xss(10501)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10501.php'}, {'name': '6072', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6072'}, {'name': 'oval:org.mitre.oval:def:942', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A942'}, {'name': 'N-011', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-011.shtml'}, {'name': '6068', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6068'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.lac.co.jp/security/intelligence/SNSAdvisory/58.html'}, {'name': 'oval:org.mitre.oval:def:944', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A944'}, {'name': 'MS02-062', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062'}, {'name': '20021105 [SNS Advisory No.58] Microsoft IIS Local Cross-site Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103651224215736&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1181?


Explain the CVE ID: What does the identifier CVE-2002-1182 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1182.

IIS 5.0 and 5.1 allows remote attackers to cause a denial of service (crash) via malformed WebDAV requests that cause a large amount of memory to be assigned.


Provide references for further information: Can you share references or external links related to CVE-2002-1182?

{'name': 'N-011', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-011.shtml'}, {'name': '6068', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6068'}, {'name': 'MS02-062', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062'}, {'name': '4846', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4846'}, {'name': 'oval:org.mitre.oval:def:1009', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1009'}, {'name': 'oval:org.mitre.oval:def:1011', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1011'}, {'name': 'iis-webdav-memory-allocation-dos(10503)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10503'}, {'name': '20021031 Microsoft Internet Information Server 5/5.1 Denial of Service (#NISR31102002)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0048.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/vna/ms-iisdos.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/ms-iisdos.txt'}, {'name': 'iis-resource-utilization-dos(10184)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10184'}, {'name': '6070', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6070'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1182?


Explain the CVE ID: What does the identifier CVE-2002-1183 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1183.

Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka "New Variant of Certificate Validation Flaw Could Enable Identity Spoofing" (CAN-2002-0862).


Provide references for further information: Can you share references or external links related to CVE-2002-1183?

{'name': 'ssl-ca-certificate-spoofing(9776)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9776'}, {'name': 'MS02-050', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050'}, {'name': '5410', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5410'}, {'name': 'oval:org.mitre.oval:def:2108', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2108'}, {'name': 'oval:org.mitre.oval:def:1455', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1455'}, {'name': 'oval:org.mitre.oval:def:1059', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1059'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1183?


Explain the CVE ID: What does the identifier CVE-2002-1184 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1184.

The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when locating programs during login or application launch from the desktop, which could allow attackers to gain privileges as other users via Trojan horse programs.


Provide references for further information: Can you share references or external links related to CVE-2002-1184?

{'name': '5415', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5415'}, {'name': 'MS02-064', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-064'}, {'name': 'win2k-partition-weak-permissions(9779)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9779'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1184?


Explain the CVE ID: What does the identifier CVE-2002-1185 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1185.

Internet Explorer 5.01 through 6.0 does not properly check certain parameters of a PNG file when opening it, which allows remote attackers to cause a denial of service (crash) by triggering a heap-based buffer overflow using invalid length codes during decompression, aka "Malformed PNG Image File Failure."


Provide references for further information: Can you share references or external links related to CVE-2002-1185?

{'name': 'MS02-066', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066'}, {'name': '6216', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6216'}, {'name': 'AD20021211', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD20021211.html'}, {'name': '20021212 PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103970996205091&w=2'}, {'name': 'oval:org.mitre.oval:def:542', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A542'}, {'name': 'ie-png-bo(10662)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10662.php'}, {'name': '20021211 PNG (Portable Network Graphics) Deflate Heap Corruption Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0105.html'}, {'name': 'oval:org.mitre.oval:def:393', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A393'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1185?


Explain the CVE ID: What does the identifier CVE-2002-1186 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1186.

Internet Explorer 5.01 through 6.0 does not properly perform security checks on certain encoded characters within a URL, which allows a remote attacker to steal potentially sensitive information from a user by redirecting the user to another site that has that information, aka "Encoded Characters Information Disclosure."


Provide references for further information: Can you share references or external links related to CVE-2002-1186?

{'name': 'MS02-066', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066'}, {'name': '5610', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5610'}, {'name': '20020903 MSIEv6 % encoding causes a problem again', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0018.html'}, {'name': 'ie-sameoriginpolicy-bypass(10039)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10039.php'}, {'name': '7845', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7845'}, {'name': 'oval:org.mitre.oval:def:495', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A495'}, {'name': '20020904 Re: MSIEv6 % encoding causes a problem again', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0030.html'}, {'name': 'oval:org.mitre.oval:def:471', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A471'}, {'name': 'oval:org.mitre.oval:def:143', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A143'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1186?


Explain the CVE ID: What does the identifier CVE-2002-1187 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1187.

Cross-site scripting vulnerability (XSS) in Internet Explorer 5.01 through 6.0 allows remote attackers to read and execute files on the local system via web pages using the <frame> or <iframe> element and javascript, aka "Frames Cross Site Scripting," as demonstrated using the PrivacyPolicy.dlg resource.


Provide references for further information: Can you share references or external links related to CVE-2002-1187?

{'name': 'MS02-066', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066'}, {'name': '5672', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5672'}, {'name': '20020909 Who framed Internet Explorer (GM#010-IE)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103158601431054&w=2'}, {'name': '2998', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2998'}, {'name': 'oval:org.mitre.oval:def:203', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A203'}, {'name': 'ie-frame-script-execution (10066)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10066.php'}, {'name': 'oval:org.mitre.oval:def:225', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A225'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1187?


Explain the CVE ID: What does the identifier CVE-2002-1188 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1188.

Internet Explorer 5.01 through 6.0 allows remote attackers to identify the path to the Temporary Internet Files folder and obtain user information such as cookies via certain uses of the OBJECT tag, which are not subjected to the proper security checks, aka "Temporary Internet Files folders Name Reading."


Provide references for further information: Can you share references or external links related to CVE-2002-1188?

{'name': 'MS02-066', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066'}, {'name': 'N-018', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-018.shtml'}, {'name': '6217', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6217'}, {'name': 'ie-object-read-tif(10665)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10665.php'}, {'name': '20020912 LEVERAGING CROSS-PROTOCOL SCRIPTING IN MSIE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103184415307193&w=2'}, {'name': 'oval:org.mitre.oval:def:690', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A690'}, {'name': 'oval:org.mitre.oval:def:444', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A444'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1188?


Explain the CVE ID: What does the identifier CVE-2002-1189 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1189.

The default configuration of Cisco Unity 2.x and 3.x does not block international operator calls in the predefined restriction tables, which could allow authenticated users to place international calls using call forwarding.


Provide references for further information: Can you share references or external links related to CVE-2002-1189?

{'name': 'cisco-unity-insecure-configuration(10282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10282.php'}, {'name': '20021004 Predefined Restriction Tables Allow Calls to International Operator', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml'}, {'name': '5896', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5896'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1189?


Explain the CVE ID: What does the identifier CVE-2002-1190 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1190.

Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.


Provide references for further information: Can you share references or external links related to CVE-2002-1190?

{'name': 'cisco-unity-example-default-account(44545)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/44545'}, {'name': 'cisco-unity-insecure-configuration(10282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10282.php'}, {'name': '20021004 Predefined Restriction Tables Allow Calls to International Operator', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/toll-fraud-pub.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1190?


Explain the CVE ID: What does the identifier CVE-2002-1191 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1191.

The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001.


Provide references for further information: Can you share references or external links related to CVE-2002-1191?

{'name': '5974', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5974'}, {'name': '20021016 Denial of Service in Sabre Desktop Reservation Client for Windows', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://marc.info/?l=bugtraq&m=103478372603106&w=2'}, {'name': 'sabre-sabserv-client-dos(10378)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10378.php'}, {'name': '6555', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6555'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.16.02.txt'}, {'name': '20021010 Denial of Service in Sabre Desktop Reservation Client for Windows', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/intelligence/vulnerabilities/display.php?id=48'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1191?


Explain the CVE ID: What does the identifier CVE-2002-1192 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1192.

Multiple buffer overflows in rogue on NetBSD 1.6 and earlier, FreeBSD 4.6, and possibly other operating systems, allows local users to gain "games" group privileges via malformed entries in a game save file.


Provide references for further information: Can you share references or external links related to CVE-2002-1192?

{'name': '5837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5837'}, {'name': '7181', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7181'}, {'name': 'NetBSD-SA2002-021', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-021.txt.asc'}, {'name': '20020928 local exploitable overflow in rogue/FreeBSD', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103342413220529&w=2'}, {'name': 'bsd-rogue-bo(10261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10261'}, {'name': '7252', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7252'}, {'name': '6098', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6098'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1192?


Explain the CVE ID: What does the identifier CVE-2002-1193 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1193.

tkmail before 4.0beta9-8.1 allows local users to create or overwrite files as users via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2002-1193?

{'name': 'DSA-172', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-172'}, {'name': '5911', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5911'}, {'name': 'tkmail-tmp-file-symlink(10307)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10307.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1193?


Explain the CVE ID: What does the identifier CVE-2002-1194 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1194.

Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message.


Provide references for further information: Can you share references or external links related to CVE-2002-1194?

{'name': 'netbsd-talkd-bo(10303)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10303.php'}, {'name': 'NetBSD-SA2002-019', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-019.txt.asc'}, {'name': '5910', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5910'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1194?


Explain the CVE ID: What does the identifier CVE-2002-1195 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1195.

Cross-site scripting vulnerability (XSS) in the PHP interface for ht://Check 1.1 allows remote web servers to insert arbitrary HTML, including script, via a web page.


Provide references for further information: Can you share references or external links related to CVE-2002-1195?

{'name': 'DSA-169', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-169'}, {'name': '20020912 ht://Check XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103184269605160&w=2'}, {'name': '5699', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5699'}, {'name': 'htcheck-server-header-xss(10089)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10089.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1195?


Explain the CVE ID: What does the identifier CVE-2002-1196 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1196.

editproducts.cgi in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, when the "usebuggroups" feature is enabled and more than 47 groups are specified, does not properly calculate bit values for large numbers, which grants extra permissions to users via known features of Perl math that set multiple bits.


Provide references for further information: Can you share references or external links related to CVE-2002-1196?

{'name': '5843', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5843'}, {'name': 'DSA-173', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-173'}, {'name': 'bugzilla-usebuggroups-permissions-leak(10233)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10233.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=167485#c12'}, {'name': '20021001 [BUGZILLA] Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103349804226566&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1196?


Explain the CVE ID: What does the identifier CVE-2002-1197 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1197.

bugzilla_email_append.pl in Bugzilla 2.14.x before 2.14.4, and 2.16.x before 2.16.1, allows remote attackers to execute arbitrary code via shell metacharacters in a system call to processmail.


Provide references for further information: Can you share references or external links related to CVE-2002-1197?

{'name': 'bugzilla-emailappend-command-injection(10234)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10234.php'}, {'name': '5844', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5844'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=163024'}, {'name': '20021001 [BUGZILLA] Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103349804226566&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1197?


Explain the CVE ID: What does the identifier CVE-2002-1198 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1198.

Bugzilla 2.16.x before 2.16.1 does not properly filter apostrophes from an email address during account creation, which allows remote attackers to execute arbitrary SQL via a SQL injection attack.


Provide references for further information: Can you share references or external links related to CVE-2002-1198?

{'name': 'bugzilla-email-sql-injection(10235)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10235.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=165221'}, {'name': '5842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5842'}, {'name': '20021001 [BUGZILLA] Security Advisory', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103349804226566&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1198?


Explain the CVE ID: What does the identifier CVE-2002-1199 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1199.

The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.


Provide references for further information: Can you share references or external links related to CVE-2002-1199?

{'name': '47903', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903'}, {'name': '20021010 Multiple vendor ypxfrd map handling vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103426842025029&w=2'}, {'name': 'CSSA-2002-SCO.40', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40'}, {'name': 'ypxfrd-file-disclosure(10329)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10329.php'}, {'name': 'VU#538033', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/538033'}, {'name': 'oval:org.mitre.oval:def:2423', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2423'}, {'name': '5937', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5937'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1199?


Explain the CVE ID: What does the identifier CVE-2002-1200 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1200.

Balabit Syslog-NG 1.4.x before 1.4.15, and 1.5.x before 1.5.20, when using template filenames or output, does not properly track the size of a buffer when constant characters are encountered during macro expansion, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2002-1200?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.balabit.hu/static/zsa/ZSA-2002-014-en.txt'}, {'name': '5934', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5934'}, {'name': 'ESA-20021029-028', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-2513.html'}, {'name': 'syslogng-macro-expansion-bo(10339)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10339.php'}, {'name': 'SuSE-SA:2002:039', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_039_syslog_ng.html'}, {'name': 'CLA-2002:547', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000547'}, {'name': '20021010 syslog-ng buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103426595021928&w=2'}, {'name': 'DSA-175', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-175'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1200?


Explain the CVE ID: What does the identifier CVE-2002-1201 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1201.

IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents AIX from releasing the associated memory buffers.


Provide references for further information: Can you share references or external links related to CVE-2002-1201?

{'name': 'aix-tcp-flood-dos(10326)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10326.php'}, {'name': 'IY31641', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?rs=0&q=IY31641&uid=isg1IY31641&loc=en_US&cs=utf-8&cc=us&lang=en'}, {'name': '20021009 Flood ACK packets cause AIX DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103418410408599&w=2'}, {'name': 'VU#102345', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/102345'}, {'name': '5925', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5925'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1201?


Explain the CVE ID: What does the identifier CVE-2002-1202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1202.

Unknown vulnerability in routed for HP Tru64 UNIX V4.0F through V5.1A allows local and remote attackers to read arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2002-1202?

{'name': 'SSRT2208', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://archives.neohapsis.com/archives/tru64/2002-q4/0002.html'}, {'name': 'tru64-routed-file-access(10316)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10316.php'}, {'name': '5913', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5913'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1202?


Explain the CVE ID: What does the identifier CVE-2002-1203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1203.

IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of service (resource exhaustion) via a flood of malformed TCP packets without any flags set.


Provide references for further information: Can you share references or external links related to CVE-2002-1203?

{'name': '20021009 Flood ACK packets cause an IBM SecureWay FireWall DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103417988503398&w=2'}, {'name': '5924', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5924'}, {'name': 'secureway-tcp-flood-dos(10249)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10249.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1203?


Explain the CVE ID: What does the identifier CVE-2002-1204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1204.

Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the user_pref() function and accessing the prefs.js file, which is stored in a directory with a predictable name.


Provide references for further information: Can you share references or external links related to CVE-2002-1204?

{'name': '20021119 iDEFENSE Security Advisory 11.19.02c: Netscape Predictable Directory Structure Allows Theft of Preferences File', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0081.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.19.02c.txt'}, {'name': 'netscape-preferences-file(10655)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10655.php'}, {'name': '6215', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6215'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1204?


Explain the CVE ID: What does the identifier CVE-2002-1209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1209.

Directory traversal vulnerability in SolarWinds TFTP Server 5.0.55, and possibly earlier, allows remote attackers to read arbitrary files via "..\" (dot-dot backslash) sequences in a GET request.


Provide references for further information: Can you share references or external links related to CVE-2002-1209?

{'name': 'tftp-dot-directory-traversal(10469)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10469'}, {'name': '20021024 iDEFENSE Security Advisory 10.24.02: Directory Traversal in SolarWinds TFTP Server', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0044.html'}, {'name': '6045', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6045'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.24.02.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1209?


Explain the CVE ID: What does the identifier CVE-2002-1210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1210.

Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment with malicious script into a frame, which then executes the script in the local browser context.


Provide references for further information: Can you share references or external links related to CVE-2002-1210?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.19.02b.txt'}, {'name': '20021119 iDEFENSE Security Advisory 11.19.02b: Eudora Script Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1210?


Explain the CVE ID: What does the identifier CVE-2002-1211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1211.

Prometheus 6.0 and earlier allows remote attackers to execute arbitrary PHP code via a modified PROMETHEUS_LIBRARY_BASE that points to code stored on a remote server, which is then used in (1) index.php, (2) install.php, or (3) various test_*.php scripts.


Provide references for further information: Can you share references or external links related to CVE-2002-1211?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.31.02b.txt'}, {'name': 'prometheus-php-file-include(10515)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10515.php'}, {'name': '20021101 iDEFENSE Security Advisory 10.31.02b: Prometheus Application Framework Code Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103616306403031&w=2'}, {'name': '20021101 iDEFENSE Security Advisory 10.31.02b: Prometheus Application Framework Code Injection', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0050.html'}, {'name': '6087', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6087'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1211?


Explain the CVE ID: What does the identifier CVE-2002-1212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1212.

Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.


Provide references for further information: Can you share references or external links related to CVE-2002-1212?

{'name': '5967', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5967'}, {'name': 'webserver-4everyone-filename-bo(10372)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10372.php'}, {'name': '20021014 DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1212?


Explain the CVE ID: What does the identifier CVE-2002-1213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1213.

Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an HTTP request with ".." (dot-dot) sequences containing URL-encoded forward slash ("%2F") characters.


Provide references for further information: Can you share references or external links related to CVE-2002-1213?

{'name': 'webserver-4everyone-encoded-traversal(10373)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10373.php'}, {'name': '20021014 DoS and Directory Traversal Vulnerabilities in WebServer 4 Everyone', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=49&type=vulnerabilities&flashstatus=true'}, {'name': '5968', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5968'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1213?


Explain the CVE ID: What does the identifier CVE-2002-1214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1214.

Buffer overflow in Microsoft PPTP Service on Windows XP and Windows 2000 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a certain PPTP packet with malformed control data.


Provide references for further information: Can you share references or external links related to CVE-2002-1214?

{'name': '5807', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5807'}, {'name': 'win-pptp-packet-bo (10199)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10199.php'}, {'name': 'MS02-063', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-063'}, {'name': '20020926 Microsoft PPTP Server and Client remote vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/293146'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1214?


Explain the CVE ID: What does the identifier CVE-2002-1215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1215.

Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain packets to UDP port 694 (incorrectly claimed as TCP in some sources).


Provide references for further information: Can you share references or external links related to CVE-2002-1215?

{'name': 'CLA-2002:540', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000540'}, {'name': 'SuSE-SA:2002:037', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_037_heartbeat.html'}, {'name': 'DSA-174', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-174'}, {'name': 'linuxha-heartbeat-bo(10357)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10357.php'}, {'name': '5955', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5955'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://linux-ha.org/security/sec01.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1215?


Explain the CVE ID: What does the identifier CVE-2002-1216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1216.

GNU tar 1.13.19 and other versions before 1.13.25 allows remote attackers to overwrite arbitrary files via a symlink attack, as the result of a modification that effectively disabled the security check.


Provide references for further information: Can you share references or external links related to CVE-2002-1216?

{'name': 'RHSA-2002:096', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-096.html'}, {'name': '20020928 GNU tar (Re: Allot Netenforcer problems, GNU TAR flaw)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103419290219680&w=2'}, {'name': 'archive-extraction-directory-traversal(10224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10224.php'}, {'name': 'MDKSA-2006:219', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:219'}, {'name': 'OpenPKG-SA-2006.038', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.038.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1216?


Explain the CVE ID: What does the identifier CVE-2002-1217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1217.

Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses <frame> and <iframe> domain restrictions.


Provide references for further information: Can you share references or external links related to CVE-2002-1217?

{'name': 'oval:org.mitre.oval:def:272', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A272'}, {'name': 'MS02-066', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066'}, {'name': 'oval:org.mitre.oval:def:333', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A333'}, {'name': '20021015 Internet Explorer : The D-Day', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103470310417576&w=2'}, {'name': '20021015 Internet Explorer : The D-Day', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103470202010570&w=2'}, {'name': 'ie-iframe-document-script-execution(10371)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10371.php'}, {'name': '5963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5963'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.greymagic.com/adv/gm011-ie/'}, {'name': '20021015 Internet Explorer : The D-Day', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0024.html'}, {'name': 'N-018', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-018.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1217?


Explain the CVE ID: What does the identifier CVE-2002-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1219.

Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).


Provide references for further information: Can you share references or external links related to CVE-2002-1219?

{'name': 'CA-2002-31', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-31.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/products/BIND/bind-security.html'}, {'name': '2002-11-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html'}, {'name': '20021201-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P'}, {'name': '6160', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6160'}, {'name': 'DSA-196', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-196'}, {'name': 'SSRT2408', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://online.securityfocus.com/advisories/4999'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F48818'}, {'name': 'oval:org.mitre.oval:def:2539', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2539'}, {'name': '20021118 TSLSA-2002-0076 - bind', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103763574715133&w=2'}, {'name': 'CLA-2002:546', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000546'}, {'name': '20021115 [OpenPKG-SA-2002.011] OpenPKG Security Advisory (bind, bind8)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/300019'}, {'name': '20021112 [Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103713117612842&w=2'}, {'name': 'N-013', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-013.shtml'}, {'name': 'VU#852283', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/852283'}, {'name': 'bind-sig-rr-bo(10304)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10304'}, {'name': '20021112 Multiple Remote Vulnerabilities in BIND4 and BIND8', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469'}, {'name': 'MDKSA-2002:077', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1219?


Explain the CVE ID: What does the identifier CVE-2002-1220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1220.

BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.


Provide references for further information: Can you share references or external links related to CVE-2002-1220?

{'name': 'CA-2002-31', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-31.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/products/BIND/bind-security.html'}, {'name': '2002-11-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html'}, {'name': 'oval:org.mitre.oval:def:449', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A449'}, {'name': 'DSA-196', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-196'}, {'name': 'SSRT2408', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://online.securityfocus.com/advisories/4999'}, {'name': '20021118 TSLSA-2002-0076 - bind', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103763574715133&w=2'}, {'name': 'VU#229595', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/229595'}, {'name': 'bind-opt-rr-dos(10332)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10332'}, {'name': '6161', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6161'}, {'name': '20021115 [OpenPKG-SA-2002.011] OpenPKG Security Advisory (bind, bind8)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/300019'}, {'name': '20021112 [Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103713117612842&w=2'}, {'name': 'N-013', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-013.shtml'}, {'name': '20021112 Multiple Remote Vulnerabilities in BIND4 and BIND8', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469'}, {'name': 'MDKSA-2002:077', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1220?


Explain the CVE ID: What does the identifier CVE-2002-1221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1221.

BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.


Provide references for further information: Can you share references or external links related to CVE-2002-1221?

{'name': 'CA-2002-31', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-31.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/products/BIND/bind-security.html'}, {'name': '2002-11-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html'}, {'name': '6159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6159'}, {'name': 'DSA-196', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-196'}, {'name': 'bind-null-dereference-dos(10333)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10333'}, {'name': 'SSRT2408', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://online.securityfocus.com/advisories/4999'}, {'name': '20021118 TSLSA-2002-0076 - bind', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103763574715133&w=2'}, {'name': 'CLA-2002:546', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000546'}, {'name': 'oval:org.mitre.oval:def:2094', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2094'}, {'name': '20021115 [OpenPKG-SA-2002.011] OpenPKG Security Advisory (bind, bind8)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/300019'}, {'name': '20021112 [Fwd: Notice of serious vulnerabilities in ISC BIND 4 & 8]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103713117612842&w=2'}, {'name': 'N-013', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-013.shtml'}, {'name': 'VU#581682', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/581682'}, {'name': '20021112 Multiple Remote Vulnerabilities in BIND4 and BIND8', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21469'}, {'name': 'MDKSA-2002:077', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-077.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1221?


Explain the CVE ID: What does the identifier CVE-2002-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1222.

Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2002-1222?

{'name': '20021016 Cisco CatOS Embedded HTTP Server Buffer Overflow', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/catos-http-overflow-vuln.shtml'}, {'name': 'cisco-catalyst-ciscoview-bo(10382)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10382.php'}, {'name': '5976', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5976'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1222?


Explain the CVE ID: What does the identifier CVE-2002-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1223.

Buffer overflow in DSC 3.0 parser from GSview, as used in KGhostView in KDE 1.1 and KDE 3.0.3a, may allow attackers to cause a denial of service or execute arbitrary code via a modified .ps (PostScript) input file.