Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0004.

Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.


Provide references for further information: Can you share references or external links related to CVE-2002-0004?

{'name': 'linux-at-exetime-heap-corruption(7909)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7909'}, {'name': 'HPSBTL0302-034', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3969'}, {'name': 'DSA-102', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-102'}, {'name': 'RHSA-2002:015', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-015.html'}, {'name': 'HPSBTL0201-021', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3833'}, {'name': "20020117 '/usr/bin/at 31337 + vuln' problem + exploit", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101128661602088&w=2'}, {'name': '3886', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3886'}, {'name': 'SuSE-SA:2002:003', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_003_at_txt.html'}, {'name': 'MDKSA-2002:007', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://marc.info/?l=bugtraq&m=101147632721031&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0004?


Explain the CVE ID: What does the identifier CVE-2002-0005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0005.

Buffer overflow in AOL Instant Messenger (AIM) 4.7.2480, 4.8.2616, and other versions allows remote attackers to execute arbitrary code via a long argument in a game request (AddGame).


Provide references for further information: Can you share references or external links related to CVE-2002-0005?

{'name': 'aim-game-overflow(7743)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7743'}, {'name': 'VU#907819', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/907819'}, {'name': '20020102 w00w00 on AOL Instant Messenger (serious vulnerability)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=72'}, {'name': '20020102 AIM addendum', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=198'}, {'name': '3769', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3769'}, {'name': '20020102 w00w00 on AOL Instant Messenger (serious vulnerability)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=100998295512885&w=2'}, {'name': '20020102 AIM addendum', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/247944'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0005?


Explain the CVE ID: What does the identifier CVE-2002-0006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0006.

XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set.


Provide references for further information: Can you share references or external links related to CVE-2002-0006?

{'name': 'xchat-ctcp-ping-command(7856)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7856'}, {'name': 'CLA-2002:453', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000453'}, {'name': 'RHSA-2002:005', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-005.html'}, {'name': 'HPSBTL0201-016', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3806'}, {'name': '3830', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3830'}, {'name': '20020109 xchat IRC session hijacking vulnerability (versions 1.4.1, 1.4.2)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101060676210255&w=2'}, {'name': 'DSA-099', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0006?


Explain the CVE ID: What does the identifier CVE-2002-0007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0007.

CGI.pl in Bugzilla before 2.14.1, when using LDAP, allows remote attackers to obtain an anonymous bind to the LDAP server via a request that does not include a password, which causes a null password to be sent to the LDAP server.


Provide references for further information: Can you share references or external links related to CVE-2002-0007?

{'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=54901'}, {'name': 'bugzilla-ldap-auth-bypass(7812)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7812'}, {'name': '3792', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3792'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0007?


Explain the CVE ID: What does the identifier CVE-2002-0008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0008.

Bugzilla before 2.14.1 allows remote attackers to (1) spoof a user comment via an HTTP request to process_bug.cgi using the "who" parameter, instead of the Bugzilla_login cookie, or (2) post a bug as another user by modifying the reporter parameter to enter_bug.cgi, which is passed to post_bug.cgi.


Provide references for further information: Can you share references or external links related to CVE-2002-0008?

{'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108385'}, {'name': 'bugzilla-processbug-comment-spoofing(7805)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7805.php'}, {'name': '3794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3794'}, {'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'name': '3793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3793'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108516'}, {'name': 'bugzilla-postbug-report-spoofing(7804)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7804.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0008?


Explain the CVE ID: What does the identifier CVE-2002-0009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0009.

show_bug.cgi in Bugzilla before 2.14.1 allows a user with "Bugs Access" privileges to see other products that are not accessible to the user, by submitting a bug and reading the resulting Product pulldown menu.


Provide references for further information: Can you share references or external links related to CVE-2002-0009?

{'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'name': '3798', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3798'}, {'name': 'bugzilla-showbug-reveal-bugs(7802)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7802.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=102141'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0009?


Explain the CVE ID: What does the identifier CVE-2002-0010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0010.

Bugzilla before 2.14.1 allows remote attackers to inject arbitrary SQL code and create files or gain privileges via (1) the sql parameter in buglist.cgi, (2) invalid field names from the "boolean chart" query in buglist.cgi, (3) the mybugslink parameter in userprefs.cgi, (4) a malformed bug ID in the buglist parameter in long_list.cgi, and (5) the value parameter in editusers.cgi, which allows groupset privileges to be modified by attackers with blessgroupset privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0010?

{'name': '20020106 Inproper input validation in Bugzilla <=2.14 - exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0052.html'}, {'name': '3805', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3805'}, {'name': '3802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3802'}, {'name': '3801', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3801'}, {'name': 'bugzilla-longlist-modify-sql(7811)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7811.php'}, {'name': 'bugzilla-editusers-change-groupset(7814)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7814.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108821'}, {'name': 'bugzilla-buglist-sql-logic(7813)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7813.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108812'}, {'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'name': 'bugzilla-buglist-modify-sql(7807)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7807.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.bugzilla.org/bugzilla2.14to2.14.1.patch'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=108822'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'name': 'bugzilla-userprefs-change-groupset(7809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7809.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=109679'}, {'name': '3804', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3804'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=109690'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0010?


Explain the CVE ID: What does the identifier CVE-2002-0011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0011.

Information leak in doeditvotes.cgi in Bugzilla before 2.14.1 may allow remote attackers to more easily conduct attacks on the login.


Provide references for further information: Can you share references or external links related to CVE-2002-0011?

{'name': 'RHSA-2002:001', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-001.html'}, {'name': '20020105 Security Advisory for Bugzilla v2.15 (cvs20020103) and older', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0034.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.bugzilla.org/security2_14_1.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=98146'}, {'name': '3800', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3800'}, {'name': 'bugzilla-doeditvotes-login-information(7803)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7803.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0011?


Explain the CVE ID: What does the identifier CVE-2002-0012 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0012.

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available.


Provide references for further information: Can you share references or external links related to CVE-2002-0012?

{'name': 'RHSA-2001:163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-163.html'}, {'name': 'oval:org.mitre.oval:def:161', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A161'}, {'name': 'oval:org.mitre.oval:def:144', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A144'}, {'name': 'MS02-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006'}, {'name': '5043', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5043'}, {'name': 'HPSBMP0206-015', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/4211'}, {'name': '20020201-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A'}, {'name': 'CA-2002-03', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-03.html'}, {'name': 'VU#107186', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/107186'}, {'name': 'oval:org.mitre.oval:def:1048', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1048'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html'}, {'name': 'oval:org.mitre.oval:def:298', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298'}, {'name': '20020212 PROTOS Remote SNMP Attack Tool', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/security_center/alerts/advise110.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0012?


Explain the CVE ID: What does the identifier CVE-2002-0013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0013.

Vulnerabilities in the SNMPv1 request handling of a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via (1) GetRequest, (2) GetNextRequest, and (3) SetRequest messages, as demonstrated by the PROTOS c06-SNMPv1 test suite.  NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor.  This and other SNMP-related candidates will be updated when more accurate information is available.


Provide references for further information: Can you share references or external links related to CVE-2002-0013?

{'name': 'RHSA-2001:163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2001-163.html'}, {'name': '57404', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-57404-1'}, {'name': 'MS02-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006'}, {'name': 'oval:org.mitre.oval:def:87', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A87'}, {'name': '20020201-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020201-01-A'}, {'name': 'CA-2002-03', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-03.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html'}, {'name': 'oval:org.mitre.oval:def:298', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A298'}, {'name': 'VU#854306', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/854306'}, {'name': '20020212 PROTOS Remote SNMP Attack Tool', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/security_center/alerts/advise110.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0013?


Explain the CVE ID: What does the identifier CVE-2002-0014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0014.

URL-handling code in Pine 4.43 and earlier allows remote attackers to execute arbitrary commands via a URL enclosed in single quotes and containing shell metacharacters (&).


Provide references for further information: Can you share references or external links related to CVE-2002-0014?

{'name': 'CLA-2002:460', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000460'}, {'name': '3815', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3815'}, {'name': 'RHSA-2002:009', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-009.html'}, {'name': 'HPSBTL0201-015', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-015'}, {'name': '20020105 Pine 4.33 (at least) URL handler allows embedded commands.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101027841605918&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0014?


Explain the CVE ID: What does the identifier CVE-2002-0017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0017.

Buffer overflow in SNMP daemon (snmpd) on SGI IRIX 6.5 through 6.5.15m allows remote attackers to execute arbitrary code via an SNMP request.


Provide references for further information: Can you share references or external links related to CVE-2002-0017?

{'name': '20020403 Remote Buffer Overflow Vulnerability in IRIX SNMP Daemon', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/security_center/alerts/advise113.php'}, {'name': 'irix-snmp-bo(7846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7846.php'}, {'name': '4421', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4421'}, {'name': '20020201-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020201-01-P'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0017?


Explain the CVE ID: What does the identifier CVE-2002-0018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0018.

In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted domain is authoritative for all listed SIDs, which allows remote attackers to gain Domain Administrator privileges on the trusting domain by injecting SIDs from untrusted domains into the authorization data that comes from from the trusted domain.


Provide references for further information: Can you share references or external links related to CVE-2002-0018?

{'name': '3997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3997'}, {'name': 'win-sid-gain-privileges(8023)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8023'}, {'name': 'oval:org.mitre.oval:def:159', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A159'}, {'name': 'MS02-001', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-001'}, {'name': 'oval:org.mitre.oval:def:64', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A64'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0018?


Explain the CVE ID: What does the identifier CVE-2002-0020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0020.

Buffer overflow in telnet server in Windows 2000 and Interix 2.2 allows remote attackers to execute arbitrary code via malformed protocol options.


Provide references for further information: Can you share references or external links related to CVE-2002-0020?

{'name': 'oval:org.mitre.oval:def:424', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A424'}, {'name': '4061', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4061'}, {'name': 'ms-telnet-option-bo(8094)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8094.php'}, {'name': 'MS02-004', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-004'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0020?


Explain the CVE ID: What does the identifier CVE-2002-0021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0021.

Network Product Identification (PID) Checker in Microsoft Office v. X for Mac allows remote attackers to cause a denial of service (crash) via a malformed product announcement.


Provide references for further information: Can you share references or external links related to CVE-2002-0021?

{'name': 'MS02-002', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-002'}, {'name': '2041', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2041'}, {'name': '4045', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4045'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0021?


Explain the CVE ID: What does the identifier CVE-2002-0022 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0022.

Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.


Provide references for further information: Can you share references or external links related to CVE-2002-0022?

{'name': 'CA-2002-04', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-04.html'}, {'name': '20020213 dH & SECURITY.NNOV: buffer overflow in mshtml.dll', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101362984930597&w=2'}, {'name': 'oval:org.mitre.oval:def:925', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A925'}, {'name': 'ie-html-directive-bo(8116)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8116.php'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}, {'name': '20020227 Details and exploitation of buffer overflow in mshtml.dll (and few sidenotes on Unicode overflows in general)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/258614'}, {'name': '4080', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4080'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0022?


Explain the CVE ID: What does the identifier CVE-2002-0023 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0023.

Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.


Provide references for further information: Can you share references or external links related to CVE-2002-0023?

{'name': 'oval:org.mitre.oval:def:77', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A77'}, {'name': '3767', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3767'}, {'name': 'ie-getobject-directory-traversal(7758)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7758'}, {'name': 'oval:org.mitre.oval:def:50', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A50'}, {'name': '3030', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3030'}, {'name': 'oval:org.mitre.oval:def:40', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A40'}, {'name': '20020101 IE GetObject() problems', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0000.html'}, {'name': 'oval:org.mitre.oval:def:17', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0023?


Explain the CVE ID: What does the identifier CVE-2002-0024 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0024.

File Download box in Internet Explorer 5.01, 5.5 and 6.0 allows an attacker to use the Content-Disposition and Content-Type HTML header fields to modify how the name of the file is displayed, which could trick a user into believing that a file is safe to download.


Provide references for further information: Can you share references or external links related to CVE-2002-0024?

{'name': '4087', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4087'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0024?


Explain the CVE ID: What does the identifier CVE-2002-0025 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0025.

Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify which application is used to process a document.


Provide references for further information: Can you share references or external links related to CVE-2002-0025?

{'name': '4085', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4085'}, {'name': 'ie-application-invocation(8118)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8118'}, {'name': '20020212 [ GFISEC04102001 ] Internet Explorer and Access allow macros to be executed automatically', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/255767'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0025?


Explain the CVE ID: What does the identifier CVE-2002-0026 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0026.

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass restrictions for executing scripts via an object that processes asynchronous events after the initial security checks have been made.


Provide references for further information: Can you share references or external links related to CVE-2002-0026?

{'name': 'oval:org.mitre.oval:def:32', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A32'}, {'name': 'oval:org.mitre.oval:def:12', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12'}, {'name': 'oval:org.mitre.oval:def:23', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A23'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}, {'name': '4082', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4082'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0026?


Explain the CVE ID: What does the identifier CVE-2002-0027 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0027.

Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between two frames from different domains, a new variant of the "Frame Domain Verification" vulnerability described in MS:MS01-058/CAN-2001-0874.


Provide references for further information: Can you share references or external links related to CVE-2002-0027?

{'name': '3031', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3031'}, {'name': '20011219 Internet Explorer Document.Open() Without Close() Cookie Stealing, File Reading, Site Spoofing Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/246522'}, {'name': '3721', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3721'}, {'name': 'oval:org.mitre.oval:def:974', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A974'}, {'name': 'MS02-005', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-005'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0027?


Explain the CVE ID: What does the identifier CVE-2002-0028 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0028.

Buffer overflow in ICQ before 2001B Beta v5.18 Build #3659 allows remote attackers to execute arbitrary code via a Voice Video & Games request.


Provide references for further information: Can you share references or external links related to CVE-2002-0028?

{'name': 'CA-2002-02', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-02.html'}, {'name': '20020106 ICQ remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101043894627851&w=2'}, {'name': 'aim-game-overflow(7743)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7743'}, {'name': 'VU#570167', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/570167'}, {'name': '3813', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3813'}, {'name': '20020107 ICQ remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101043076806401&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0028?


Explain the CVE ID: What does the identifier CVE-2002-0029 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0029.

Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.


Provide references for further information: Can you share references or external links related to CVE-2002-0029?

{'name': 'bind-dns-libresolv-bo(10624)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10624.php'}, {'name': 'NetBSD-SA2002-028', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-028.txt.asc'}, {'name': 'CA-2002-31', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-31.html'}, {'name': '6186', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6186'}, {'name': 'VU#844360', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/844360'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.isc.org/products/BIND/bind-security.html'}, {'name': '2002-11-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/Security-announce/2002/Nov/msg00000.html'}, {'name': '20021201-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021201-01-P'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0029?


Explain the CVE ID: What does the identifier CVE-2002-0030 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0030.

The digital signature mechanism for the Adobe Acrobat PDF viewer only verifies the PE header of executable code for a plug-in, which can allow attackers to execute arbitrary code in certified mode by making the plug-in appear to be signed by Adobe.


Provide references for further information: Can you share references or external links related to CVE-2002-0030?

{'name': 'VU#549913', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/549913'}, {'name': '20030324 Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2003-March/004230.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kb.cert.org/vuls/id/JSHA-5EZQGZ'}, {'name': '20030324 Vulnerability (critical): Digital signature for Adobe Acrobat/Reader plug-in can be forged', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0148.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0030?


Explain the CVE ID: What does the identifier CVE-2002-0031 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0031.

Buffer overflows in Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary code via a ymsgr URI with long arguments to (1) call, (2) sendim, (3) getimv, (4) chat, (5) addview, or (6) addfriend.


Provide references for further information: Can you share references or external links related to CVE-2002-0031?

{'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': 'VU#137115', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/137115'}, {'name': '20020527 Yahoo Messenger - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274223'}, {'name': '4837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4837'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0031?


Explain the CVE ID: What does the identifier CVE-2002-0032 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0032.

Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ymsgr URI.


Provide references for further information: Can you share references or external links related to CVE-2002-0032?

{'name': 'CA-2002-16', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-16.html'}, {'name': '20020527 Yahoo Messenger - Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274223'}, {'name': '4838', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4838'}, {'name': 'VU#172315', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/172315'}, {'name': 'yahoo-messenger-script-injection(9184)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9184.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0032?


Explain the CVE ID: What does the identifier CVE-2002-0033 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0033.

Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.


Provide references for further information: Can you share references or external links related to CVE-2002-0033?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F44309'}, {'name': 'oval:org.mitre.oval:def:124', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A124'}, {'name': 'VU#635811', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/635811'}, {'name': 'CA-2002-11', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-11.html'}, {'name': '4674', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4674'}, {'name': 'oval:org.mitre.oval:def:31', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A31'}, {'name': '20020505 [LSD] Solaris cachefsd remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0026.html'}, {'name': 'solaris-cachefsd-name-bo(8999)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8999.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0033?


Explain the CVE ID: What does the identifier CVE-2002-0034 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0034.

The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.


Provide references for further information: Can you share references or external links related to CVE-2002-0034?

{'name': 'Q237399', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B237399'}, {'name': 'VU#361065', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/361065'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0034?


Explain the CVE ID: What does the identifier CVE-2002-0035 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0035.


Provide references for further information: Can you share references or external links related to CVE-2002-0035?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0035?


Explain the CVE ID: What does the identifier CVE-2002-0036 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0036.

Integer signedness error in MIT Kerberos V5 ASN.1 decoder before krb5 1.2.5 allows remote attackers to cause a denial of service via a large unsigned data element length, which is later used as a negative value.


Provide references for further information: Can you share references or external links related to CVE-2002-0036?

{'name': 'RHSA-2003:052', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-052.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-001-multiple.txt'}, {'name': 'RHSA-2003:051', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-051.html'}, {'name': 'MDKSA-2003:043', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:043'}, {'name': '4896', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4896'}, {'name': '6713', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6713'}, {'name': 'kerberos-kdc-neglength-bo(11190)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/11190'}, {'name': 'CLA-2003:639', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000639'}, {'name': 'VU#587579', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/587579'}, {'name': 'RHSA-2003:168', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-168.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0036?


Explain the CVE ID: What does the identifier CVE-2002-0037 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0037.

Lotus Domino Servers 5.x, 4.6x, and 4.5x allows attackers to bypass the intended Reader and Author access list for a document's object via a Notes API call (NSFDbReadObject) that directly accesses the object.


Provide references for further information: Can you share references or external links related to CVE-2002-0037?

{'name': 'lotus-domino-nsfdbreadobject(10095)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10095.php'}, {'name': '20010917 Re: Lotus Notes: File attachments may be extracted regardless of document security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0150.html'}, {'name': '20010917 Lotus Notes: File attachments may be extracted regardless of document security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-09/0147.html'}, {'name': 'VU#657899', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/657899'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0037?


Explain the CVE ID: What does the identifier CVE-2002-0038 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0038.

Vulnerability in the cache-limiting function of the unified name service daemon (nsd) in IRIX 6.5.4 through 6.5.11 allows remote attackers to cause a denial of service by forcing the cache to fill the disk.


Provide references for further information: Can you share references or external links related to CVE-2002-0038?

{'name': '20020102-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020102-01-I'}, {'name': '20020102-02-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020102-02-I'}, {'name': '3882', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3882'}, {'name': '20020102-03-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020102-03-P'}, {'name': 'irix-nsd-cache-dos(7907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7907'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0038?


Explain the CVE ID: What does the identifier CVE-2002-0039 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0039.

rpcbind in SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, allows remote attackers to cause a denial of service (crash) via malformed RPC packets with invalid lengths.


Provide references for further information: Can you share references or external links related to CVE-2002-0039?

{'name': '20020306-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0039?


Explain the CVE ID: What does the identifier CVE-2002-0040 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0040.

Vulnerability in SGI IRIX 6.5.11 through 6.5.15f allows local users to cause privileged applications to dump core via the HOSTALIASES environment variable, which might allow the users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0040?

{'name': '20020306-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020306-01-P'}, {'name': '4388', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4388'}, {'name': '2058', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2058'}, {'name': 'irix-hostaliases-gain-privileges(8669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8669.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0040?


Explain the CVE ID: What does the identifier CVE-2002-0041 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0041.

Unknown vulnerability in Mail for SGI IRIX 6.5 through 6.5.15f, and possibly earlier versions, when running with the -R option, allows local and remote attackers to cause a core dump.


Provide references for further information: Can you share references or external links related to CVE-2002-0041?

{'name': 'irix-mail-core-dump(8835)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8835.php'}, {'name': '20020401-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020401-01-P'}, {'name': '4499', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4499'}, {'name': 'M-067', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/m-067.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0041?


Explain the CVE ID: What does the identifier CVE-2002-0042 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0042.

Vulnerability in the XFS file system for SGI IRIX before 6.5.12 allows local users to cause a denial of service (hang) by creating a file that is not properly processed by XFS.


Provide references for further information: Can you share references or external links related to CVE-2002-0042?

{'name': '4511', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4511'}, {'name': 'irix-xfs-dos(8839)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8839.php'}, {'name': '20020402-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20020402-01-P'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0042?


Explain the CVE ID: What does the identifier CVE-2002-0043 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0043.

sudo 1.6.0 through 1.6.3p7 does not properly clear the environment before calling the mail program, which could allow local users to gain root privileges by modifying environment variables and changing how the mail program is invoked.


Provide references for further information: Can you share references or external links related to CVE-2002-0043?

{'name': 'FreeBSD-SA-02:06', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02%3A06.asc'}, {'name': 'RHSA-2002:013', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-013.html'}, {'name': 'sudo-unclean-env-root(7891)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7891'}, {'name': 'IMNX-2002-70-001-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://www.securityfocus.com/advisories/3800'}, {'name': '3871', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3871'}, {'name': '20020114 Sudo version 1.6.4 now available (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/250168'}, {'name': '20020116 Sudo +Postfix Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101120193627756&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.sudo.ws/sudo/alerts/postfix.html'}, {'name': 'SuSE-SA:2002:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_002_sudo_txt.html'}, {'name': 'MDKSA-2002:003', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:003'}, {'name': 'DSA-101', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-101'}, {'name': 'RHSA-2002:011', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-011.html'}, {'name': 'CLA-2002:451', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000451'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0043?


Explain the CVE ID: What does the identifier CVE-2002-0044 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0044.

GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2002-0044?

{'name': 'HPSBTL0201-019', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/3818'}, {'name': '3920', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3920'}, {'name': 'RHSA-2002:012', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-012.html'}, {'name': 'DSA-105', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-105'}, {'name': 'gnu-enscript-tmpfile-symlink(7932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7932'}, {'name': 'MDKSA-2002:010', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-010.php3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0044?


Explain the CVE ID: What does the identifier CVE-2002-0045 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0045.

slapd in OpenLDAP 2.0 through 2.0.19 allows local users, and anonymous users before 2.0.8, to conduct a "replace" action on access controls without any values, which causes OpenLDAP to delete non-mandatory attributes that would otherwise be protected by ACLs.


Provide references for further information: Can you share references or external links related to CVE-2002-0045?

{'name': 'HPSBTL0201-020', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0201-020'}, {'name': 'CLA-2002:459', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000459'}, {'name': 'RHSA-2002:014', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-014.html'}, {'name': '3945', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3945'}, {'name': 'CSSA-2002-001.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-001.0.txt'}, {'name': '5395', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5395'}, {'name': 'openldap-slapd-delete-attributes(7978)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7978'}, {'name': 'MDKSA-2002:013', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:013'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openldap.org/lists/openldap-announce/200201/msg00002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0045?


Explain the CVE ID: What does the identifier CVE-2002-0046 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0046.

Linux kernel, and possibly other operating systems, allows remote attackers to read portions of memory via a series of fragmented ICMP packets that generate an ICMP TTL Exceeded response, which includes portions of the memory in the response packet.


Provide references for further information: Can you share references or external links related to CVE-2002-0046?

{'name': 'icmp-read-memory(7998)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7998'}, {'name': '5394', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5394'}, {'name': 'RHSA-2002:007', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-007.html'}, {'name': '20020120 remote memory reading through tcp/icmp', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/251418'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0046?


Explain the CVE ID: What does the identifier CVE-2002-0047 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0047.

CIPE VPN package before 1.3.0-3 allows remote attackers to cause a denial of service (crash) via a short malformed packet.


Provide references for further information: Can you share references or external links related to CVE-2002-0047?

{'name': 'DSA-104', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-104'}, {'name': 'cipe-packet-handling-dos(7883)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7883'}, {'name': 'RHSA-2002:007', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-007.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0047?


Explain the CVE ID: What does the identifier CVE-2002-0048 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0048.

Multiple signedness errors (mixed signed and unsigned numbers) in the I/O functions of rsync 2.4.6, 2.3.2, and other versions allow remote attackers to cause a denial of service and execute arbitrary code in the rsync client or server.


Provide references for further information: Can you share references or external links related to CVE-2002-0048?

{'name': '3958', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3958'}, {'name': '20020128 TSLSA-2002-0025 - rsync', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101223214906963&w=2'}, {'name': 'ESA-20020125-004', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-1853.html'}, {'name': '20020127 rsync-2.5.2 has security fix (was: Re: [RHSA-2002:018-05] New rsync packages available)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101223603321315&w=2'}, {'name': 'CLA-2002:458', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000458'}, {'name': 'VU#800635', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/800635'}, {'name': 'DSA-106', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-106'}, {'name': 'SuSE-SA:2002:004', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archives/suse-security-announce/2002-Jan/0003.html'}, {'name': 'CSSA-2002-003.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/CSSA-2002-003.0.txt'}, {'name': 'linux-rsync-root-access(7993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/7993.php'}, {'name': 'RHSA-2002:018', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-018.html'}, {'name': 'FreeBSD-SA-02:10', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:10.rsync.asc'}, {'name': 'HPSBTL0201-022', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/3839'}, {'name': 'MDKSA-2002:009', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-009.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0048?


Explain the CVE ID: What does the identifier CVE-2002-0049 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0049.

Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.


Provide references for further information: Can you share references or external links related to CVE-2002-0049?

{'name': 'exchange-attendant-incorrect-permissions(8092)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8092'}, {'name': '4053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4053'}, {'name': '2042', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2042'}, {'name': 'oval:org.mitre.oval:def:1022', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1022'}, {'name': 'MS02-003', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-003'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0049?


Explain the CVE ID: What does the identifier CVE-2002-0050 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0050.

Buffer overflow in AuthFilter ISAPI filter on Microsoft Commerce Server 2000 allows remote attackers to execute arbitrary code via long authentication data.


Provide references for further information: Can you share references or external links related to CVE-2002-0050?

{'name': 'MS02-010', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-010'}, {'name': '4157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4157'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0050?


Explain the CVE ID: What does the identifier CVE-2002-0051 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0051.

Windows 2000 allows local users to prevent the application of new group policy settings by opening Group Policy files with exclusive-read access.


Provide references for further information: Can you share references or external links related to CVE-2002-0051?

{'name': '20011205 SECURITY.NNOV: file locking and security (group policy DoS on Windows 2000 domain)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/244329'}, {'name': 'oval:org.mitre.oval:def:38', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A38'}, {'name': 'MS02-016', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-016'}, {'name': '4438', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4438'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0051?


Explain the CVE ID: What does the identifier CVE-2002-0052 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0052.

Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2002-0052?

{'name': 'MS02-009', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-009'}, {'name': '763', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/763'}, {'name': '4158', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4158'}, {'name': '1003630', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1003630'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0052?


Explain the CVE ID: What does the identifier CVE-2002-0053 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0053.

Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service or execute arbitrary code via a malformed management request.  NOTE: this candidate may be split or merged with other candidates.  This and other PROTOS-related candidates, especially CVE-2002-0012 and CVE-2002-0013, will be updated when more accurate information is available.


Provide references for further information: Can you share references or external links related to CVE-2002-0053?

{'tags': ['x_refsource_MISC'], 'url': 'http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0013'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0012'}, {'name': 'MS02-006', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-006'}, {'name': 'CA-2002-03', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-03.html'}, {'name': 'VU#107186', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/107186'}, {'name': 'oval:org.mitre.oval:def:402', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A402'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html'}, {'name': 'VU#854306', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/854306'}, {'name': 'oval:org.mitre.oval:def:209', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A209'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0053?


Explain the CVE ID: What does the identifier CVE-2002-0054 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0054.

SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.


Provide references for further information: Can you share references or external links related to CVE-2002-0054?

{'name': '20020301 IIS SMTP component allows mail relaying via Null Session', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101501580409373&w=2'}, {'name': 'MS02-011', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-011'}, {'name': '4205', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4205'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0054?


Explain the CVE ID: What does the identifier CVE-2002-0055 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0055.

SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.


Provide references for further information: Can you share references or external links related to CVE-2002-0055?

{'name': 'MS02-012', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-012'}, {'name': '4204', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4204'}, {'name': 'ms-smtp-data-transfer-dos(8307)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8307.php'}, {'name': 'oval:org.mitre.oval:def:30', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A30'}, {'name': '20020306 Vulnerability Details for MS02-012', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101558498401274&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0055?


Explain the CVE ID: What does the identifier CVE-2002-0056 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0056.

Buffer overflow in SQL Server 7.0 and 2000 allows remote attackers to execute arbitrary code via a long OLE DB provider name to (1) OpenDataSource or (2) OpenRowset in an ad hoc connection.


Provide references for further information: Can you share references or external links related to CVE-2002-0056?

{'name': 'MS02-007', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-007'}, {'name': 'VU#619707', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/619707'}, {'name': '20020219 MSDE, Sql Server 7 & 2000 Adhoc Heterogenous Queries Buffer Overflow and DOS', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101413924631329&w=2'}, {'name': '20020219 MSDE, Sql Server 7 & 2000 Adhoc Heterogenous Queries Buffer Overflow and DOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101422555428036&w=2'}, {'name': '4135', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4135'}, {'name': 'oval:org.mitre.oval:def:271', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A271'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0056?


Explain the CVE ID: What does the identifier CVE-2002-0057 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0057.

XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.


Provide references for further information: Can you share references or external links related to CVE-2002-0057?

{'name': 'ie-xmlhttp-redirect(7712)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7712'}, {'name': '3699', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3699'}, {'name': '20011214 MSIE6 can read local files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2001-12/0152.html'}, {'name': 'MS02-008', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-008'}, {'name': '3032', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3032'}, {'name': '20020212 Update on the MS02-005 patch, holes still remain', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101366383408821&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0057?


Explain the CVE ID: What does the identifier CVE-2002-0058 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0058.

Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK.


Provide references for further information: Can you share references or external links related to CVE-2002-0058?

{'name': 'MS02-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013'}, {'name': '00216', 'tags': ['vendor-advisory', 'x_refsource_SUN'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216'}, {'name': '20020305 Java HTTP proxy vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101534535304228&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0058?


Explain the CVE ID: What does the identifier CVE-2002-0059 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0059.

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.


Provide references for further information: Can you share references or external links related to CVE-2002-0059?

{'name': 'CA-2002-07', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-07.html'}, {'name': 'MDKSA-2002:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:022'}, {'name': '4267', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4267'}, {'name': 'zlib-doublefree-memory-corruption(8427)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8427'}, {'name': 'HPSBTL0204-030', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-030'}, {'name': 'CLA-2002:469', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000469'}, {'name': 'MDKSA-2002:023', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-023.php'}, {'name': 'DSA-122', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-122'}, {'name': 'CSSA-2002-015.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-015.1.txt'}, {'name': 'MDKSA-2002:024', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-024.php3'}, {'name': 'VU#368819', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/368819'}, {'name': 'RHSA-2002:027', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-027.html'}, {'name': 'CSSA-2002-014.1', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/CSSA-2002-014.1.txt'}, {'name': 'HPSBTL0204-036', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-036'}, {'name': 'RHSA-2002:026', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-026.html'}, {'name': 'HPSBTL0204-037', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBTL0204-037'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0059?


Explain the CVE ID: What does the identifier CVE-2002-0060 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0060.

IRC connection tracking helper module in the netfilter subsystem for Linux 2.4.18-pre9 and earlier does not properly set the mask for conntrack expectations for incoming DCC connections, which could allow remote attackers to bypass intended firewall restrictions.


Provide references for further information: Can you share references or external links related to CVE-2002-0060?

{'name': 'VU#230307', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/230307'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.netfilter.org/security/2002-02-25-irc-dcc-mask.html'}, {'name': 'HPSBUX0203-027', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=HPSBUX0203-027'}, {'name': 'MDKSA-2002:041', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:041'}, {'name': '20020227 Fwd: [ANNOUNCE] Security Advisory about IRC DCC connection tracking', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101486352429653&w=2'}, {'name': '20020227 security advisory linux 2.4.x ip_conntrack_irc', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101483396412051&w=2'}, {'name': 'RHSA-2002:028', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-028.html'}, {'name': 'linux-dcc-port-access(8302)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8302'}, {'name': '4188', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4188'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0060?


Explain the CVE ID: What does the identifier CVE-2002-0061 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0061.

Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.


Provide references for further information: Can you share references or external links related to CVE-2002-0061?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apacheweek.com/issues/02-03-29#apache1324'}, {'name': '4335', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4335'}, {'name': 'apache-dos-batch-command-execution(8589)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8589.php'}, {'name': '20020321 Vulnerability in Apache for Win32 batch file processing - Remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101674082427358&w=2'}, {'name': '20020325 Apache 1.3.24 Released! (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/263927'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0061?


Explain the CVE ID: What does the identifier CVE-2002-0062 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0062.

Buffer overflow in ncurses 5.0, and the ncurses4 compatibility package as used in Red Hat Linux, allows local users to gain privileges, related to "routines for moving the physical cursor and scrolling."


Provide references for further information: Can you share references or external links related to CVE-2002-0062?

{'name': '2116', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2116'}, {'name': 'DSA-113', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-113'}, {'name': 'RHSA-2002:020', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-020.html'}, {'name': 'gnu-ncurses-window-bo(8222)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8222.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0062?


Explain the CVE ID: What does the identifier CVE-2002-0063 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0063.

Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values.


Provide references for further information: Can you share references or external links related to CVE-2002-0063?

{'name': 'SuSE-SA:2002:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html'}, {'name': 'MDKSA-2002:015', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-015.php'}, {'name': 'CSSA-2002-008.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-008.0.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cups.org/relnotes.html'}, {'name': 'RHSA-2002:032', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-032.html'}, {'name': 'DSA-110', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-110'}, {'name': '4100', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4100'}, {'name': 'cups-ippread-bo(8192)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8192'}, {'name': 'CLA-2002:471', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000471'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0063?


Explain the CVE ID: What does the identifier CVE-2002-0064 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0064.

Funk Software Proxy Host 3.x is installed with insecure permissions for the registry and the file system.


Provide references for further information: Can you share references or external links related to CVE-2002-0064?

{'name': '4458', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4458'}, {'name': 'funk-proxy-insecure-permissions(8791)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8791.php'}, {'name': "20020408 Unauthorized remote control access to systems running Funk Software's Proxy v3.x", 'tags': ['vendor-advisory', 'x_refsource_BINDVIEW'], 'url': 'http://razor.bindview.com/publish/advisories/adv_FunkProxy.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0064?


Explain the CVE ID: What does the identifier CVE-2002-0065 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0065.

Funk Software Proxy Host 3.x uses weak encryption for the Proxy Host password, which allows local users to gain privileges by recovering the passwords from the PHOST.INI file or the Windows registry.


Provide references for further information: Can you share references or external links related to CVE-2002-0065?

{'name': 'funk-proxy-weak-password(8792)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8792.php'}, {'name': '4459', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4459'}, {'name': "20020408 Unauthorized remote control access to systems running Funk Software's Proxy v3.x", 'tags': ['vendor-advisory', 'x_refsource_BINDVIEW'], 'url': 'http://razor.bindview.com/publish/advisories/adv_FunkProxy.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0065?


Explain the CVE ID: What does the identifier CVE-2002-0066 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0066.

Funk Software Proxy Host 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control, which allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0066?

{'name': 'funk-proxy-named-pipe(8793)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8793.php'}, {'name': '4460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4460'}, {'name': "20020408 Unauthorized remote control access to systems running Funk Software's Proxy v3.x", 'tags': ['vendor-advisory', 'x_refsource_BINDVIEW'], 'url': 'http://razor.bindview.com/publish/advisories/adv_FunkProxy.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0066?


Explain the CVE ID: What does the identifier CVE-2002-0067 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0067.

Squid 2.4 STABLE3 and earlier does not properly disable HTCP, even when "htcp_port 0" is specified in squid.conf, which could allow remote attackers to bypass intended access restrictions.


Provide references for further information: Can you share references or external links related to CVE-2002-0067?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.4/bugs/'}, {'name': 'CLA-2002:464', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464'}, {'name': 'MDKSA-2002:016', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php'}, {'name': '20020222 TSLSA-2002-0031 - squid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101443252627021&w=2'}, {'name': 'FreeBSD-SA-02:12', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc'}, {'name': 'CSSA-2002-SCO.7', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html'}, {'name': 'squid-htcp-enabled(8261)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8261.php'}, {'name': '4150', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4150'}, {'name': '20020221 Squid HTTP Proxy Security Update Advisory 2002:1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101431040422095&w=2'}, {'name': 'RHSA-2002:029', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-029.html'}, {'name': '5379', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5379'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0067?


Explain the CVE ID: What does the identifier CVE-2002-0068 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0068.

Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service (core dump) and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters.


Provide references for further information: Can you share references or external links related to CVE-2002-0068?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.4/bugs/'}, {'name': 'CLA-2002:464', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464'}, {'name': 'SuSE-SA:2002:008', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_008_squid_txt.html'}, {'name': 'MDKSA-2002:016', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php'}, {'name': '20020222 Squid buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101440163111826&w=2'}, {'name': '20020222 TSLSA-2002-0031 - squid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101443252627021&w=2'}, {'name': 'FreeBSD-SA-02:12', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc'}, {'name': 'CSSA-2002-SCO.7', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html'}, {'name': '20020221 Squid HTTP Proxy Security Update Advisory 2002:1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101431040422095&w=2'}, {'name': 'RHSA-2002:029', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-029.html'}, {'name': 'CSSA-2002-010.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.caldera.com/support/security/advisories/CSSA-2002-010.0.txt'}, {'name': '5378', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5378'}, {'name': 'squid-ftpbuildtitleurl-bo(8258)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8258.php'}, {'name': '4148', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4148'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0068?


Explain the CVE ID: What does the identifier CVE-2002-0069 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0069.

Memory leak in SNMP in Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2002-0069?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squid-cache.org/Versions/v2/2.4/bugs/'}, {'name': 'CLA-2002:464', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000464'}, {'name': 'MDKSA-2002:016', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-016.php'}, {'name': '20020222 TSLSA-2002-0031 - squid', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101443252627021&w=2'}, {'name': 'FreeBSD-SA-02:12', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:12.squid.asc'}, {'name': 'CSSA-2002-SCO.7', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://archives.neohapsis.com/archives/linux/caldera/2002-q1/0014.html'}, {'name': 'squid-snmp-dos(8260)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8260.php'}, {'name': '20020221 Squid HTTP Proxy Security Update Advisory 2002:1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101431040422095&w=2'}, {'name': 'RHSA-2002:029', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-029.html'}, {'name': '4146', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4146'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0069?


Explain the CVE ID: What does the identifier CVE-2002-0070 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0070.

Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.