Provide references for further information: Can you share references or external links related to CVE-2002-0839?

{'name': 'DSA-188', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-188'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2'}, {'name': 'ESA-20021007-024', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-2414.html'}, {'name': '20021105-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I'}, {'name': 'HPSBUX0210-224', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4617'}, {'name': 'DSA-187', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-187'}, {'name': 'SSRT090208', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130497311408250&w=2'}, {'name': '20021003 iDEFENSE Security Advisory 10.03.2002: Apache 1.3.x shared memory scoreboard vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0012.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apacheweek.com/issues/02-10-04'}, {'name': '5884', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5884'}, {'name': 'DSA-195', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-195'}, {'name': '20021003 [OpenPKG-SA-2002.009] OpenPKG Security Advisory (apache)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103376585508776&w=2'}, {'name': 'apache-scorecard-memory-overwrite(10280)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10280.php'}, {'name': 'MDKSA-2002:068', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php'}, {'name': 'HPSBOV02683', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=130497311408250&w=2'}, {'name': 'CLA-2002:530', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530'}, {'name': '20021017 TSLSA-2002-0069-apache', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html'}, {'name': '20021015 GLSA: apache', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0195.html'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210422 svn commit: r1074079 [2/3] - in /websites/staging/httpd/trunk/content: ./ apreq/ contribute/ contributors/ dev/ docs-project/ docs/ info/ mod_fcgid/ mod_ftp/ mod_mbox/ mod_smtpd/ modules/ security/ test/ test/flood/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0839?


Explain the CVE ID: What does the identifier CVE-2002-0840 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0840.

Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalName is "Off" and support for wildcard DNS is present, allows remote attackers to execute script as other web page visitors via the Host: header, a different vulnerability than CAN-2002-1157.


Provide references for further information: Can you share references or external links related to CVE-2002-0840?

{'name': 'DSA-188', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-188'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2'}, {'name': 'ESA-20021007-024', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-2414.html'}, {'name': 'HPSBUX0210-224', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4617'}, {'name': 'DSA-187', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-187'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apacheweek.com/issues/02-10-04'}, {'name': 'DSA-195', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-195'}, {'name': '20021003 [OpenPKG-SA-2002.009] OpenPKG Security Advisory (apache)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103376585508776&w=2'}, {'name': 'MDKSA-2002:068', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php'}, {'name': 'CLA-2002:530', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530'}, {'name': '20021017 TSLSA-2002-0069-apache', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html'}, {'name': '20021002 Apache 2 Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103357160425708&w=2'}, {'name': 'RHSA-2002:243', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-243.html'}, {'name': '862', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/862'}, {'name': 'RHSA-2002:222', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-222.html'}, {'name': 'RHSA-2003:106', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-106.html'}, {'name': 'RHSA-2002:251', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-251.html'}, {'name': 'apache-http-host-xss(10241)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10241'}, {'name': '20021105-02-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021105-02-I'}, {'name': '20021002 Apache 2 Cross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0003.html'}, {'name': 'VU#240329', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/240329'}, {'name': '5847', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5847'}, {'name': 'RHSA-2002:248', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-248.html'}, {'name': 'RHSA-2002:244', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-244.html'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0840?


Explain the CVE ID: What does the identifier CVE-2002-0841 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0841.


Provide references for further information: Can you share references or external links related to CVE-2002-0841?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0841?


Explain the CVE ID: What does the identifier CVE-2002-0842 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0842.

Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g. Oracle9i Application Server 9.0.2) allows remote attackers to execute arbitrary code via a destination URI that forces a "502 Bad Gateway" response, which causes the format string specifiers to be returned from dav_lookup_uri() in mod_dav.c, which is then used in a call to ap_log_rerror().


Provide references for further information: Can you share references or external links related to CVE-2002-0842?

{'name': 'CA-2003-05', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-05.html'}, {'name': 'N-046', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-046.shtml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2003alert52.pdf'}, {'name': '20030217 Oracle9i Application Server Format String Vulnerability (#NISR16022003d)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104549708626309&w=2'}, {'name': 'VU#849993', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/849993'}, {'name': '20030217 Oracle9i Application Server Format String Vulnerability (#NISR16022003d)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0076.html'}, {'name': 'oracle-appserver-davpublic-dos(11330)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11330.php'}, {'name': '6846', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6846'}, {'name': '20030217 Oracle9i Application Server Format String Vulnerability (#NISR16022003d)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104549708626309&w=2'}, {'name': '20030218 Re: CSSA-2003-007.0 Advisory withdrawn.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104560577227981&w=2'}, {'name': '20030218 CSSA-2003-007.0 Advisory withdrawn.  Re: Security Update: [CSSA-2003-007.0] Linux: Apache mod_dav mo', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104559446010858&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/ora-appservfmtst.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0842?


Explain the CVE ID: What does the identifier CVE-2002-0843 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0843.

Buffer overflows in the ApacheBench benchmark support program (ab.c) in Apache before 1.3.27, and Apache 2.x before 2.0.43, allow a malicious web server to cause a denial of service and possibly execute arbitrary code via a long response.


Provide references for further information: Can you share references or external links related to CVE-2002-0843?

{'name': 'DSA-188', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-188'}, {'name': 'CLSA-2002:530', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.info/?l=apache-httpd-announce&m=103367938230488&w=2'}, {'name': 'ESA-20021007-024', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/other_advisory-2414.html'}, {'name': '5996', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5996'}, {'name': 'IY87070', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY87070&apar=only'}, {'name': '20021105-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021105-01-I'}, {'name': 'HPSBUX0210-224', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4617'}, {'name': 'ADV-2006-3263', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/3263'}, {'name': '20021016 Apache 1.3.26', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0229.html'}, {'name': '000530', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000530'}, {'name': 'DSA-187', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-187'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apacheweek.com/issues/02-10-04'}, {'name': '5887', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5887'}, {'name': 'DSA-195', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-195'}, {'name': '20021003 [OpenPKG-SA-2002.009] OpenPKG Security Advisory (apache)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103376585508776&w=2'}, {'name': 'MDKSA-2002:068', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-068.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=2871'}, {'name': 'CLA-2002:530', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000530'}, {'name': '21425', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21425'}, {'name': '20021017 TSLSA-2002-0069-apache', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0254.html'}, {'name': '5995', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5995'}, {'name': 'apache-apachebench-response-bo(10281)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10281.php'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [2/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd00b45b93fda4a5bd013b28587207d0e00f99f6e3308dbb6025f3b01%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210603 svn commit: r1075360 [1/3] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2021-31618.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0843?


Explain the CVE ID: What does the identifier CVE-2002-0844 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0844.

Off-by-one overflow in the CVS PreservePermissions of rcs.c for CVSD before 1.11.2 allows local users to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2002-0844?

{'name': '20040103-01-U', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc'}, {'name': 'RHSA-2004:004', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-004.html'}, {'name': 'CSSA-2002-035.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-035.0.txt'}, {'name': '20020525 [DER ADV#8] - Local off by one in CVSD', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0081.html'}, {'name': 'cvs-rcs-offbyone-bo(9175)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9175'}, {'name': '4829', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4829'}, {'name': '20020525 [DER ADV#8] - Local off by one in CVSD', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102233767925177&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0844?


Explain the CVE ID: What does the identifier CVE-2002-0845 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0845.

Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.


Provide references for further information: Can you share references or external links related to CVE-2002-0845?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sun.com/service/support/software/iplanet/alerts/transferencodingalert-23july2002.html'}, {'name': 'iplanet-chunked-encoding-bo(9799)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9799.php'}, {'name': '5433', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5433'}, {'name': '20020808 EEYE: Sun(TM) ONE / iPlanet Web Server 4.1 and 6.0 Remote Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102890933623192&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0845?


Explain the CVE ID: What does the identifier CVE-2002-0846 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0846.

The decoder for Macromedia Shockwave Flash allows remote attackers to execute arbitrary code via a malformed SWF header that contains more data than the specified length.


Provide references for further information: Can you share references or external links related to CVE-2002-0846?

{'name': 'RHSA-2003:027', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-027.html'}, {'name': '5430', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5430'}, {'name': '20020830 RE:  Macromedia Shockwave Flash Malformed Header Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103072708329280&w=2'}, {'name': 'RHSA-2003:026', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-026.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/v1/handlers/index.cfm?ID=23293'}, {'name': 'flash-swf-header-bo(9798)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9798.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0846?


Explain the CVE ID: What does the identifier CVE-2002-0847 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0847.

tinyproxy HTTP proxy 1.5.0, 1.4.3, and earlier allows remote attackers to execute arbitrary code via memory that is freed twice (double-free).


Provide references for further information: Can you share references or external links related to CVE-2002-0847?

{'name': 'DSA-145', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2002/dsa-145'}, {'name': 'tinyproxy-memory-corruption(9079)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9079.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=88790'}, {'name': '4731', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4731'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0847?


Explain the CVE ID: What does the identifier CVE-2002-0848 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0848.

Cisco VPN 5000 series concentrator hardware 6.0.21.0002 and earlier, and 5.2.23.0003 and earlier, when using RADIUS with a challenge type of Password Authentication Protocol (PAP) or Challenge, sends the user password in cleartext in a validation retry request, which could allow remote attackers to steal passwords via sniffing.


Provide references for further information: Can you share references or external links related to CVE-2002-0848?

{'name': '20020807 Cisco VPN 5000 Series Concentrator RADIUS PAP Authentication Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/vpn5k-radius-pap-vuln-pub.shtml'}, {'name': 'cisco-vpn5000-plaintext-password(9781)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9781.php'}, {'name': '5417', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5417'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0848?


Explain the CVE ID: What does the identifier CVE-2002-0849 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0849.

Linux-iSCSI iSCSI implementation installs the iscsi.conf file with world-readable permissions on some operating systems, including Red Hat Linux Limbo Beta #1, which could allow local users to gain privileges by reading the cleartext CHAP password.


Provide references for further information: Can you share references or external links related to CVE-2002-0849?

{'name': '20020808 iDEFENSE Security Advisory: iSCSI Default Configuration File Settings', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102882056105806&w=2'}, {'name': 'linux-iscsi-conf-insecure(9792)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9792.php'}, {'name': '20020808 Re: [VulnWatch] iDEFENSE Security Advisory: iSCSI Default Configuration File Settings', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102891036424424&w=2'}, {'name': '5423', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5423'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0849?


Explain the CVE ID: What does the identifier CVE-2002-0850 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0850.

Buffer overflow in PGP Corporate Desktop 7.1.1 allows remote attackers to execute arbitrary code via an encrypted document that has a long filename when it is decrypted.


Provide references for further information: Can you share references or external links related to CVE-2002-0850?

{'name': '5656', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5656'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://download.nai.com/products/licensed/pgp/desktop_security/windows/version_7.1.1/pgphotfix_outlookplugin711/ReadMe.txt'}, {'name': '20020905 Foundstone Labs Advisory - Remotely Exploitable Buffer Overflow in PGP', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0106.html'}, {'name': 'pgp-long-filename-bo(10043)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10043'}, {'name': '20020906 Foundstone Labs Advisory - Remotely Exploitable Buffer Overflow in PGP', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103133995920090&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0850?


Explain the CVE ID: What does the identifier CVE-2002-0851 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0851.

Format string vulnerability in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the ISDN4Linux (i4l) package allows local users to gain root privileges via format strings in the device name command line argument, which is not properly handled in a call to syslog.


Provide references for further information: Can you share references or external links related to CVE-2002-0851?

{'name': 'isdn4linux-ipppd-format-string(9811)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9811.php'}, {'name': '20020809 Local Root Exploit', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0068.html'}, {'name': '5437', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5437'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0851?


Explain the CVE ID: What does the identifier CVE-2002-0852 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0852.

Buffer overflows in Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service via (1) an Internet Key Exchange (IKE) with a large Security Parameter Index (SPI) payload, or (2) an IKE packet with a large number of valid payloads.


Provide references for further information: Can you share references or external links related to CVE-2002-0852?

{'name': '20020812 Cisco VPN Client Multiple Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0852?


Explain the CVE ID: What does the identifier CVE-2002-0853 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0853.

Cisco Virtual Private Network (VPN) Client 3.5.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a zero-length payload.


Provide references for further information: Can you share references or external links related to CVE-2002-0853?

{'name': '20020812 Cisco VPN Client Multiple Vulnerabilities', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/vpnclient-multiple-vuln-pub.shtml'}, {'name': 'VU#287771', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/287771'}, {'name': '5440', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5440'}, {'name': 'cisco-vpn-zerolength-dos(9821)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9821.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0853?


Explain the CVE ID: What does the identifier CVE-2002-0854 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0854.

Buffer overflows in ISDN Point to Point Protocol (PPP) daemon (ipppd) in the i4l package on SuSE 7.3, 8.0, and possibly other operating systems, may allow local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0854?

{'name': 'SuSE-SA:2002:030', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'https://lists.opensuse.org/opensuse-security-announce/2002-08/msg00006.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0854?


Explain the CVE ID: What does the identifier CVE-2002-0855 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0855.

Cross-site scripting vulnerability in Mailman before 2.0.12 allows remote attackers to execute script as other users via a subscriber's list subscription options in the (1) adminpw or (2) info parameters to the ml-name feature.


Provide references for further information: Can you share references or external links related to CVE-2002-0855?

{'name': '20020724 cross-site scripting bug of Mailman', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-07/0268.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mail.python.org/pipermail/mailman-announce/2002-July/000043.html'}, {'name': 'RHSA-2002:177', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-177.html'}, {'name': 'RHSA-2002:178', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-178.html'}, {'name': 'DSA-147', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-147'}, {'name': '5298', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5298'}, {'name': 'RHSA-2002:181', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-181.html'}, {'name': 'RHSA-2002:176', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-176.html'}, {'name': 'mailman-subscription-option-xss(9985)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9985.php'}, {'name': 'CLA-2002:522', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0855?


Explain the CVE ID: What does the identifier CVE-2002-0856 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0856.

SQL*NET listener for Oracle Net Oracle9i 9.0.x and 9.2 allows remote attackers to cause a denial of service (crash) via certain debug requests that are not properly handled by the debugging feature.


Provide references for further information: Can you share references or external links related to CVE-2002-0856?

{'name': '20020813 ISS Security Brief: Remote Denial of Service Vulnerability in Oracle9i SQL*NET', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0072.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2002alert38rev1.pdf'}, {'name': '20020813 Remote Denial of Service Vulnerability in Oracle9i SQL*NET', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20941'}, {'name': 'oracle-listener-debug-dos(9237)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9237.php'}, {'name': '5457', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5457'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0856?


Explain the CVE ID: What does the identifier CVE-2002-0857 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0857.

Format string vulnerabilities in Oracle Listener Control utility (lsnrctl) for Oracle 9.2 and 9.0, 8.1, and 7.3.4, allow remote attackers to execute arbitrary code on the Oracle DBA system by placing format strings into certain entries in the listener.ora configuration file.


Provide references for further information: Can you share references or external links related to CVE-2002-0857?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/2002alert40rev1.pdf'}, {'name': 'VU#301059', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/301059'}, {'name': '1005037', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005037'}, {'name': '5460', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5460'}, {'name': '20020814 Oracle Listener Control Format String Vulnerabilities (#NISR14082002)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102933735716634&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/ora-lsnrfmtstr.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0857?


Explain the CVE ID: What does the identifier CVE-2002-0858 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0858.

catsnmp in Oracle 9i and 8i is installed with a dbsnmp user with a default dbsnmp password, which allows attackers to perform restricted database operations and possibly gain other privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0858?

{'name': '20020812 Vulnerability in Oracle', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102918005402808&w=2'}, {'name': 'oracle-catsnmp-default-account(9932)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9932.php'}, {'name': '9476', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/9476'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0858?


Explain the CVE ID: What does the identifier CVE-2002-0859 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0859.

Buffer overflow in the OpenDataSource function of the Jet engine on Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2002-0859?

{'name': '20020619 Microsoft SQL Server 2000 OpenDataSource Buffer Overflow (#NISR19062002)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102450188620081&w=2'}, {'name': 'mssql-jet-ods-bo(9375)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9375.php'}, {'name': '5057', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5057'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/advisories/mssql-ods.txt'}, {'name': 'Q282010', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ282010'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0859?


Explain the CVE ID: What does the identifier CVE-2002-0860 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0860.

The LoadText method in the spreadsheet component in Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to read arbitrary files through Internet Explorer via a URL that redirects to the target file.


Provide references for further information: Can you share references or external links related to CVE-2002-0860?

{'name': 'MS02-044', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044'}, {'name': 'owc-spreadsheet-loadtext-read-files (8778)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8778.php'}, {'name': '3007', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3007'}, {'name': '20020408 Reading local files with OWC in IE (GM#006-IE)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101829911018463&w=2'}, {'name': '4453', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4453'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0860?


Explain the CVE ID: What does the identifier CVE-2002-0861 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0861.

Microsoft Office Web Components (OWC) 2000 and 2002 allows remote attackers to bypass the "Allow paste operations via script" setting, even when it is disabled, via the (1) Copy method of the Cell object or (2) the Paste method of the Range object.


Provide references for further information: Can you share references or external links related to CVE-2002-0861?

{'name': 'owc-spreadsheet-clipboard-access(8779)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8779.php'}, {'name': '20020408 Controlling the clipboard with OWC in IE (GM#007-IE)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101829726516346&w=2'}, {'name': '4457', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4457'}, {'name': 'MS02-044', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-044'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0861?


Explain the CVE ID: What does the identifier CVE-2002-0862 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0862.

The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.


Provide references for further information: Can you share references or external links related to CVE-2002-0862?

{'name': 'oval:org.mitre.oval:def:1332', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1332'}, {'name': '20020812 IE SSL Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102918200405308&w=2'}, {'name': 'oval:org.mitre.oval:def:1056', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1056'}, {'name': '20020805 IE SSL Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102866120821995&w=2'}, {'name': 'ssl-ca-certificate-spoofing(9776)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9776'}, {'name': '20020819 Insufficient Verification of Client Certificates in IIS 5.0 pre sp3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102976967730450&w=2'}, {'name': 'oval:org.mitre.oval:def:2671', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2671'}, {'name': 'MS02-050', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-050'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0862?


Explain the CVE ID: What does the identifier CVE-2002-0863 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0863.

Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which could allow a remote attacker to determine the contents of encrypted sessions via sniffing, aka "Weak Encryption in RDP Protocol."


Provide references for further information: Can you share references or external links related to CVE-2002-0863?

{'name': '5711', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5711'}, {'name': 'MS02-051', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051'}, {'name': 'win-rdp-keystroke-monitoring(10122)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10122.php'}, {'name': 'VU#865833', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/865833'}, {'name': '20020916 Microsoft Windows Remote Desktop Protocol checksum and keystroke vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103235960119404&w=2'}, {'name': '5712', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5712'}, {'name': '20020918 Microsoft Windows Terminal Services vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103236181522253&w=2'}, {'name': 'win-rdp-checksum-leak(10121)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10121.php'}, {'name': 'oval:org.mitre.oval:def:199', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A199'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0863?


Explain the CVE ID: What does the identifier CVE-2002-0864 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0864.

The Remote Data Protocol (RDP) version 5.1 in Microsoft Windows XP allows remote attackers to cause a denial of service (crash) when Remote Desktop is enabled via a PDU Confirm Active data packet that does not set the Pattern BLT command, aka "Denial of Service in Remote Desktop."


Provide references for further information: Can you share references or external links related to CVE-2002-0864?

{'name': 'MS02-051', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-051'}, {'name': '20020918 Microsoft Windows Terminal Services vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103236181522253&w=2'}, {'name': '20020916 Microsoft Windows XP Remote Desktop denial of service vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103235745116592&w=2'}, {'name': 'winxp-remote-desktop-dos(10120)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10120.php'}, {'name': '5713', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5713'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0864?


Explain the CVE ID: What does the identifier CVE-2002-0865 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0865.

A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."


Provide references for further information: Can you share references or external links related to CVE-2002-0865?

{'name': 'msvm-xml-methods-access(10135)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10135.php'}, {'name': '5752', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5752'}, {'name': 'MS02-052', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052'}, {'name': 'VU#140898', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/140898'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0865?


Explain the CVE ID: What does the identifier CVE-2002-0866 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0866.

Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."


Provide references for further information: Can you share references or external links related to CVE-2002-0866?

{'name': 'msvm-jdbc-dll-execution(10133)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10133.php'}, {'name': 'VU#307306', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/307306'}, {'name': 'MS02-052', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052'}, {'name': '5751', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5751'}, {'name': '20020923 Technical information about the vulnerabilities fixed by MS-02-52', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-09/0271.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0866?


Explain the CVE ID: What does the identifier CVE-2002-0867 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0867.

Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw."


Provide references for further information: Can you share references or external links related to CVE-2002-0867?

{'name': 'msvm-jdbc-ie-dos(10134)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10134.php'}, {'name': 'VU#792881', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/792881'}, {'name': 'MS02-052', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052'}, {'name': '5750', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5750'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0867?


Explain the CVE ID: What does the identifier CVE-2002-0869 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0869.

Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."


Provide references for further information: Can you share references or external links related to CVE-2002-0869?

{'name': 'oval:org.mitre.oval:def:983', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983'}, {'name': 'oval:org.mitre.oval:def:929', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A929'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt'}, {'name': '20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103642839205574&w=2'}, {'name': 'iis-outofprocess-privilege-elevation(10502)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10502.php'}, {'name': 'N-011', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-011.shtml'}, {'name': 'MS02-062', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062'}, {'name': 'oval:org.mitre.oval:def:930', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A930'}, {'name': '20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0869?


Explain the CVE ID: What does the identifier CVE-2002-0870 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0870.

The original patch for the Cisco Content Service Switch 11000 Series authentication bypass vulnerability (CVE-2001-0622) was incomplete, which still allows remote attackers to gain additional privileges by directly requesting the web management URL instead of navigating through the interface, possibly via a variant of the original attack, as identified by Cisco bug ID CSCdw08549.


Provide references for further information: Can you share references or external links related to CVE-2002-0870?

{'name': '20020814 Cisco Content Service Switch 11000 Series Web Management Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/arrowpoint-webmgmt-vuln-pub.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0870?


Explain the CVE ID: What does the identifier CVE-2002-0871 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0871.

xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to cause a denial of service via the pipe.


Provide references for further information: Can you share references or external links related to CVE-2002-0871?

{'name': 'DSA-151', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2002/dsa-151'}, {'name': '20020814 GLSA: xinetd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102935383506155&w=2'}, {'name': 'RHSA-2002:196', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-196.html'}, {'name': 'RHSA-2003:228', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-228.html'}, {'name': 'MDKSA-2002:053', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-053.php'}, {'name': '5458', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5458'}, {'name': 'xinetd-signal-leak-dos(9844)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9844.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0871?


Explain the CVE ID: What does the identifier CVE-2002-0872 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0872.

l2tpd 0.67 does not initialize the random number generator, which allows remote attackers to hijack sessions.


Provide references for further information: Can you share references or external links related to CVE-2002-0872?

{'name': 'DSA-152', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-152'}, {'name': 'l2tpd-rand-number-predictable(9845)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9845.php'}, {'name': '5451', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5451'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0872?


Explain the CVE ID: What does the identifier CVE-2002-0873 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0873.

Vulnerability in l2tpd 0.67 allows remote attackers to overwrite the vendor field via a long value in an attribute/value pair, possibly via a buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2002-0873?

{'name': 'DSA-152', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-152'}, {'name': 'l2tpd-vendor-field-bo(10460)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10460.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0873?


Explain the CVE ID: What does the identifier CVE-2002-0874 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0874.

Vulnerability in Interchange 4.8.6, 4.8.3, and other versions, when running in INET mode, allows remote attackers to read arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2002-0874?

{'name': 'DSA-150', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-150'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0874?


Explain the CVE ID: What does the identifier CVE-2002-0875 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0875.

Vulnerability in FAM 2.6.8, 2.6.6, and other versions allows unprivileged users to obtain the names of files whose access is restricted to the root group.


Provide references for further information: Can you share references or external links related to CVE-2002-0875?

{'name': 'FreeBSD-SN-02:05', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SN-02:05.asc'}, {'name': 'RHSA-2005:005', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2005-005.html'}, {'name': '20000301-03-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20000301-03-I'}, {'name': 'sgi-fam-insecure-permissions(9880)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9880.php'}, {'name': 'DSA-154', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-154'}, {'name': '5487', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5487'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0875?


Explain the CVE ID: What does the identifier CVE-2002-0876 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0876.

Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2002-0876?

{'name': '20020709 Exploit for previously reported DoS issues in Shambala Server 4.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/281265'}, {'name': '4897', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4897'}, {'name': 'shambala-web-request-dos(9225)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9225.php'}, {'name': '20020530 [[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0876?


Explain the CVE ID: What does the identifier CVE-2002-0877 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0877.

Directory traversal vulnerability in the FTP server for Shambala 4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) LIST (ls) or (2) GET commands.


Provide references for further information: Can you share references or external links related to CVE-2002-0877?

{'name': 'shambala-dotdot-directory-traversal(9224)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9224.php'}, {'name': '4896', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4896'}, {'name': '20020530 [[ TH 026 Inc. ]] SA #3 - Shambala Server 4.5, Directory Traversal and DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0282.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0877?


Explain the CVE ID: What does the identifier CVE-2002-0878 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0878.

SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field.


Provide references for further information: Can you share references or external links related to CVE-2002-0878?

{'name': '20020604 sql injection in Logisense software', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0010.html'}, {'name': 'logisense-sql-injection(9268)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9268.php'}, {'name': '4931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4931'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0878?


Explain the CVE ID: What does the identifier CVE-2002-0879 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0879.

showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.


Provide references for further information: Can you share references or external links related to CVE-2002-0879?

{'name': "20020529 Gafware's CFXImage vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0256.html'}, {'name': 'cfximage-dotdot-directory-traversal(9196)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9196.php'}, {'name': '4882', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4882'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0879?


Explain the CVE ID: What does the identifier CVE-2002-0880 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0880.

Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allow remote attackers to cause a denial of service (crash) via malformed packets as demonstrated by (1) "jolt", (2) "jolt2", (3) "raped", (4) "hping2", (5) "bloop", (6) "bubonic", (7) "mutant", (8) "trash", and (9) "trash2."


Provide references for further information: Can you share references or external links related to CVE-2002-0880?

{'name': '20020522 Multiple Vulnerabilities in Cisco IP Telephones', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0880?


Explain the CVE ID: What does the identifier CVE-2002-0881 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0881.

Cisco IP Phone (VoIP) models 7910, 7940, and 7960 use a default administrative password, which allows attackers with physical access to the phone to modify the configuration settings.


Provide references for further information: Can you share references or external links related to CVE-2002-0881?

{'name': '20020522 Multiple Vulnerabilities in CISCO VoIP Phones', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273673'}, {'name': 'cisco-ipphone-configuration-access(9144)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9144.php'}, {'name': '20020522 Multiple Vulnerabilities in Cisco IP Telephones', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml'}, {'name': '4799', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4799'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0881?


Explain the CVE ID: What does the identifier CVE-2002-0882 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0882.

The web server for Cisco IP Phone (VoIP) models 7910, 7940, and 7960 allows remote attackers to cause a denial of service (reset) and possibly read sensitive memory via a large integer value in (1) the stream ID of the StreamingStatistics script, or (2) the port ID of the PortInformation script.


Provide references for further information: Can you share references or external links related to CVE-2002-0882?

{'name': '20020522 Multiple Vulnerabilities in CISCO VoIP Phones', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273673'}, {'name': '4794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4794'}, {'name': '20020522 Multiple Vulnerabilities in Cisco IP Telephones', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/multiple-ip-phone-vulnerabilities-pub.shtml'}, {'name': '4798', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4798'}, {'name': 'cisco-ipphone-streamingstatistics-dos(9142)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9142.php'}, {'name': 'cisco-ipphone-portinformation(9143)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9143.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0882?


Explain the CVE ID: What does the identifier CVE-2002-0883 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0883.

Vulnerability in Compaq ProLiant BL e-Class Integrated Administrator 1.0 and 1.10, allows authenticated users with Telnet, SSH, or console access to conduct unauthorized activities.


Provide references for further information: Can you share references or external links related to CVE-2002-0883?

{'name': 'compaq-proliant-gain-access(9202)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9202.php'}, {'name': '4802', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4802'}, {'name': 'SSRT2179', 'tags': ['vendor-advisory', 'x_refsource_COMPAQ'], 'url': 'http://ftp.support.compaq.com/patches/.new/html/SSRT2179.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0883?


Explain the CVE ID: What does the identifier CVE-2002-0884 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0884.

Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.


Provide references for further information: Can you share references or external links related to CVE-2002-0884?

{'name': '4791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4791'}, {'name': '20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html'}, {'name': '20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273584'}, {'name': 'CSSA-2002-SCO.29', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt'}, {'name': 'solaris-inrarpd-code-execution(9150)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9150.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0884?


Explain the CVE ID: What does the identifier CVE-2002-0885 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0885.

Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.


Provide references for further information: Can you share references or external links related to CVE-2002-0885?

{'name': '4791', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4791'}, {'name': '20020521 [VulnWatch] [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0074.html'}, {'name': '20020522 [DER Adv #7] - Multiple Vulnerabilities in solaris in.rarpd', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273584'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.caldera.com/pub/updates/OpenUNIX/CSSA-2002-SCO.29/CSSA-2002-SCO.29.txt'}, {'name': 'solaris-inrarpd-code-execution(9150)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9150.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0885?


Explain the CVE ID: What does the identifier CVE-2002-0886 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0886.

Cisco DSL CPE devices running CBOS 2.4.4 and earlier allows remote attackers to cause a denial of service (hang or memory consumption) via (1) a large packet to the DHCP port, (2) a large packet to the Telnet port, or (3) a flood of large packets to the CPE, which causes the TCP/IP stack to consume large amounts of memory.


Provide references for further information: Can you share references or external links related to CVE-2002-0886?

{'name': '20020523 CBOS - Improving Resilience to Denial-of-Service Attacks', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/CBOS-DoS.shtml'}, {'name': '4813', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4813'}, {'name': 'cisco-cbos-telnet-cpe-dos(9152)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9152'}, {'name': '4814', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4814'}, {'name': 'cisco-cbos-tcpip-dos(9153)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9153.php'}, {'name': 'cisco-cbos-dhcp-dos(9151)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9151.php'}, {'name': '4815', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4815'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0886?


Explain the CVE ID: What does the identifier CVE-2002-0887 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0887.

scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.


Provide references for further information: Can you share references or external links related to CVE-2002-0887?

{'name': '20010522 [SRT2001-10] - scoadmin /tmp issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=99057164129869&w=2'}, {'name': 'openserver-scoadmin-symlink(9210)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9210.php'}, {'name': '4875', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4875'}, {'name': 'CSSA-2002-SCO.22', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.22/CSSA-2002-SCO.22.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0887?


Explain the CVE ID: What does the identifier CVE-2002-0888 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0888.

3Com OfficeConnect Remote 812 ADSL Router, firmware 1.1.9 and 1.1.7, allows remote attackers to bypass port access restrictions by connecting to an approved port and quickly connecting to the desired port, which is allowed by the router.


Provide references for further information: Can you share references or external links related to CVE-2002-0888?

{'name': '3com-officeconnect-pat-access(9185)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9185.php'}, {'name': '20020612 Part II: Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-06/0102.html'}, {'name': '4841', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4841'}, {'name': '20020527 Vulnerability in 3Com® OfficeConnect® Remote 812 ADSL Router', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0230.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0888?


Explain the CVE ID: What does the identifier CVE-2002-0889 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0889.

Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.


Provide references for further information: Can you share references or external links related to CVE-2002-0889?

{'name': '20020428 QPopper 4.0.4 buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/269969'}, {'name': '20020428 QPopper 4.0.4 buffer overflow', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=102003707432457&w=2'}, {'name': 'qpopper-bulldir-bo(8949)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8949.php'}, {'name': '4614', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4614'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0889?


Explain the CVE ID: What does the identifier CVE-2002-0891 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0891.

The web interface (WebUI) of NetScreen ScreenOS before 2.6.1r8, and certain 2.8.x and 3.0.x versions before 3.0.3r1, allows remote attackers to cause a denial of service (crash) via a long user name.


Provide references for further information: Can you share references or external links related to CVE-2002-0891?

{'name': 'netscreen-screenos-username-dos(9186)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9186.php'}, {'name': '4842', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4842'}, {'name': '20020527 Netscreen 25 unauthorised reboot issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274240'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.netscreen.com/support/ns25_reboot.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0891?


Explain the CVE ID: What does the identifier CVE-2002-0892 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0892.

The default configuration of NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to determine the path of the web root via a direct request to com.newatlanta.servletexec.JSP10Servlet without a filename, which leaks the pathname in an error message.


Provide references for further information: Can you share references or external links related to CVE-2002-0892?

{'name': '20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273615'}, {'name': '20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html'}, {'name': 'servletexec-jsp10servlet-path-disclosure(9139)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9139.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.newatlanta.com/do/findFaq?faq_id=151'}, {'name': '4793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4793'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0892?


Explain the CVE ID: What does the identifier CVE-2002-0893 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0893.

Directory traversal vulnerability in NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to read arbitrary files via a URL-encoded request to com.newatlanta.servletexec.JSP10Servlet containing "..%5c" (modified dot-dot) sequences.


Provide references for further information: Can you share references or external links related to CVE-2002-0893?

{'name': '20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273615'}, {'name': '4795', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4795'}, {'name': 'servletexec-dotdot-directory-traversal(9140)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9140.php'}, {'name': '20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0893?


Explain the CVE ID: What does the identifier CVE-2002-0894 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0894.

NewAtlanta ServletExec ISAPI 4.1 allows remote attackers to cause a denial of service (crash) via (1) a request for a long .jsp file, or (2) a long URL sent directly to com.newatlanta.servletexec.JSP10Servlet.


Provide references for further information: Can you share references or external links related to CVE-2002-0894?

{'name': '20020522 Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273615'}, {'name': '4796', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4796'}, {'name': '20020522 [VulnWatch] Multiple vulnerabilities in NewAtlanta ServletExec ISAPI 4.1', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0077.html'}, {'name': 'servletexec-long-jsp-dos(9141)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9141.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0894?


Explain the CVE ID: What does the identifier CVE-2002-0895 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0895.

Buffer overflow in MatuFtpServer 1.1.3.0 (1.1.3) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PASS (password) command.


Provide references for further information: Can you share references or external links related to CVE-2002-0895?

{'name': '4792', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4792'}, {'name': 'matuftpserver-pass-bo(9138)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9138.php'}, {'name': '20020522 MatuFtpServer Remote Buffer Overflow and Possible DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/273581'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0895?


Explain the CVE ID: What does the identifier CVE-2002-0896 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0896.

The throttle capability in Swatch may fail to report certain events if (1) the same type of event occurs after the throttle period, or (2) when multiple events matching the same "watchfor" expression do not occur after the throttle period, which could allow attackers to avoid detection.


Provide references for further information: Can you share references or external links related to CVE-2002-0896?

{'name': '20020515 swatch bug in throttle', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/272582'}, {'name': '4746', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4746'}, {'name': 'swatch-event-reporting-failure(9100)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9100.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0896?


Explain the CVE ID: What does the identifier CVE-2002-0897 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0897.

LocalWEB2000 2.1.0 web server allows remote attackers to bypass access restrictions for restricted files via a URL that contains the "/./" directory.


Provide references for further information: Can you share references or external links related to CVE-2002-0897?

{'name': '4820', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4820'}, {'name': 'localweb2k-protection-bypass(9165)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9165.php'}, {'name': '20020524 [SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274020'}, {'name': '20020524 [SecurityOffice] LocalWeb2000 Web Server Protected File Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0079.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0897?


Explain the CVE ID: What does the identifier CVE-2002-0898 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0898.

Opera 6.0.1 and 6.0.2 allows a remote web site to upload arbitrary files from the client system, without prompting the client, via an input type=file tag whose value contains a newline.


Provide references for further information: Can you share references or external links related to CVE-2002-0898?

{'name': '20020527 Reading ANY local file in Opera (GM#001-OP)', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=102256058220402&w=2'}, {'name': '20020527 Reading ANY local file in Opera (GM#001-OP)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274202'}, {'name': 'opera-browser-file-retrieval(9188)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9188.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.opera.com/windows/changelog/log603.html'}, {'name': '4834', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4834'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0898?


Explain the CVE ID: What does the identifier CVE-2002-0899 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0899.

Falcon web server 2.0.0.1021 and earlier allows remote attackers to bypass access restrictions for protected files via a URL whose directory portion ends in a . (dot).


Provide references for further information: Can you share references or external links related to CVE-2002-0899?

{'name': '20020527 [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability #2', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274205'}, {'name': 'falcon-protected-file-access(9179)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9179.php'}, {'name': '20020527 [VulnWatch] [SecurityOffice] Falcon Web Server Unauthorized File Disclosure Vulnerability #2', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0084.html'}, {'name': '4833', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4833'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0899?


Explain the CVE ID: What does the identifier CVE-2002-0900 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0900.

Buffer overflow in pks PGP public key web server before 0.9.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long search argument to the lookup capability.


Provide references for further information: Can you share references or external links related to CVE-2002-0900?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.rubin.ch/pgp/src/patch_buffoverflow20020525'}, {'name': 'pgp-pks-search-bo(9171)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9171.php'}, {'name': '20020524 pks public key server DOS and remote execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274107'}, {'name': '4828', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4828'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0900?


Explain the CVE ID: What does the identifier CVE-2002-0901 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0901.

Multiple buffer overflows in Advanced Maryland Automatic Network Disk Archiver (AMANDA) 2.3.0.4 allow (1) remote attackers to execute arbitrary code via long commands to the amindexd daemon, or certain local users to execute arbitrary code via long command line arguments to the programs (2) amcheck, (3) amgetidx, (4) amtrmidx, (5) createindex-dump, or (6) createindex-gnutar.


Provide references for further information: Can you share references or external links related to CVE-2002-0901?

{'name': 'amanda-amindexd-bo(9181)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9181.php'}, {'name': '20020527 AMANDA security issues', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274215'}, {'name': '4836', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4836'}, {'name': 'amanda-operator-bo(9182)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9182.php'}, {'name': '4840', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4840'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0901?


Explain the CVE ID: What does the identifier CVE-2002-0902 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0902.

Cross-site scripting vulnerability in phpBB 2.0.0 (phpBB2) allows remote attackers to execute Javascript as other phpBB users by including a http:// and a double-quote (") in the [IMG] tag, which bypasses phpBB's security check, terminates the src parameter of the resulting HTML IMG tag, and injects the script.


Provide references for further information: Can you share references or external links related to CVE-2002-0902?

{'name': '4858', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4858'}, {'name': "20020526 Cross Site Scripting Vulnerability in phpBB2's [IMG] tag and remote avatar", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274273'}, {'name': 'phpbb-bbcode-image-css(9178)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9178.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0902?


Explain the CVE ID: What does the identifier CVE-2002-0903 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0903.

register.php for WoltLab Burning Board (wbboard) 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack on the new user ID and the code value.


Provide references for further information: Can you share references or external links related to CVE-2002-0903?

{'name': 'burningboard-bbs-account-hijacking(9177)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9177.php'}, {'name': '20020526 wbbboard 1.1.1 registration _new_users_vulnerability_', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/274269'}, {'name': '4859', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4859'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0903?


Explain the CVE ID: What does the identifier CVE-2002-0904 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0904.

SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.