Provide references for further information: Can you share references or external links related to CVE-2002-1223?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20021008-1.txt'}, {'name': 'N-155', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-155.shtml'}, {'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'name': '101426', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-101426-1'}, {'name': '20021009 KDE Security Advisory: KGhostview Arbitary Code Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0163.html'}, {'name': 'MDKSA-2002:071', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:071'}, {'name': 'gsview-dsc-ps-bo(11319)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11319.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1223?


Explain the CVE ID: What does the identifier CVE-2002-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1224.

Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter.


Provide references for further information: Can you share references or external links related to CVE-2002-1224?

{'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20021008-2.txt'}, {'name': '20021009 KDE Security Advisory: kpf Directory traversal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0164.html'}, {'name': '5951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5951'}, {'name': '20021011 Security hole in kpf - KDE personal fileserver.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/294991'}, {'name': 'kpf-icon-view-files(10347)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10347.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1224?


Explain the CVE ID: What does the identifier CVE-2002-1225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1225.

Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.


Provide references for further information: Can you share references or external links related to CVE-2002-1225?

{'name': '5729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5729'}, {'name': 'DSA-178', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-178'}, {'name': 'SuSE-SA:2002:034', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://marc.info/?l=bugtraq&m=103341355708817&w=2'}, {'name': 'heimdal-kf-kfd-bo(10116)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10116.php'}, {'name': '20021014 GLSA: heimdal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103462479621246&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1225?


Explain the CVE ID: What does the identifier CVE-2002-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1226.

Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows (CVE-2002-1225).


Provide references for further information: Can you share references or external links related to CVE-2002-1226?

{'name': 'DSA-178', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-178'}, {'name': 'SuSE-SA:2002:034', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://marc.info/?l=bugtraq&m=103341355708817&w=2'}, {'name': '20021014 GLSA: heimdal', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103462479621246&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1226?


Explain the CVE ID: What does the identifier CVE-2002-1227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1227.

PAM 0.76 treats a disabled password as if it were an empty (null) password, which allows local and remote attackers to gain privileges as disabled users.


Provide references for further information: Can you share references or external links related to CVE-2002-1227?

{'name': 'pam-disabled-bypass-authentication(10405)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10405.php'}, {'name': '5994', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5994'}, {'name': 'DSA-177', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-177'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1227?


Explain the CVE ID: What does the identifier CVE-2002-1228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1228.

Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon.


Provide references for further information: Can you share references or external links related to CVE-2002-1228?

{'name': '47815', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-47815-1'}, {'name': 'solaris-nfs-lockd-dos(10394)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10394.php'}, {'name': '20021017 NFS Denial of Service advisory from Sun', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103487058823193&w=2'}, {'name': 'VU#855635', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/855635'}, {'name': '5986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5986'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1228?


Explain the CVE ID: What does the identifier CVE-2002-1229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1229.

Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-1229?

{'name': 'avaya-cajun-default-passwords(10374)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10374.php'}, {'name': 'VU#482241', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/482241'}, {'name': '5965', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5965'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/japple/css/japple?PAGE=avaya.css.OpenPage&temp.template.name=Avaya_P580_P882_Undocumented'}, {'name': '20021015 Undocumented account vulnerability in Avaya P550R/P580/P880/P882', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103470243012971&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1229?


Explain the CVE ID: What does the identifier CVE-2002-1230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1230.

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."


Provide references for further information: Can you share references or external links related to CVE-2002-1230?

{'name': 'N-027', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-027.shtml'}, {'name': '5927', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5927'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.packetstormsecurity.nl/filedesc/GetAd.c.html'}, {'name': 'MS02-071', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071'}, {'tags': ['x_refsource_MISC'], 'url': 'http://getad.chat.ru/'}, {'name': 'oval:org.mitre.oval:def:681', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A681'}, {'name': 'win-netdde-gain-privileges(10343)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10343.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1230?


Explain the CVE ID: What does the identifier CVE-2002-1231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1231.

SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc.


Provide references for further information: Can you share references or external links related to CVE-2002-1231?

{'name': '6025', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6025'}, {'name': 'openunix-unixware-rcp-dos(10425)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10425.php'}, {'name': 'CSSA-2002-SCO.41', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.41'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1231?


Explain the CVE ID: What does the identifier CVE-2002-1232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1232.

Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of requests for a map that does not exist.


Provide references for further information: Can you share references or external links related to CVE-2002-1232?

{'name': 'HPSBTL0210-074', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4605'}, {'name': 'RHSA-2003:229', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-229.html'}, {'name': 'CSSA-2002-054.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-054.0.txt'}, {'name': 'DSA-180', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-180'}, {'name': 'RHSA-2002:224', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-224.html'}, {'name': 'MDKSA-2002:078', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-078.php'}, {'name': 'ypserv-map-memory-leak(10423)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10423.php'}, {'name': 'CLA-2002:539', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000539'}, {'name': 'RHSA-2002:223', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-223.html'}, {'name': '6016', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6016'}, {'name': '20021028 GLSA: ypserv', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103582692228894&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1232?


Explain the CVE ID: What does the identifier CVE-2002-1233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1233.

A regression error in the Debian distributions of the apache-ssl package (before 1.3.9 on Debian 2.2, and before 1.3.26 on Debian 3.0), for Apache 1.3.27 and earlier, allows local users to read or modify the Apache password file via a symlink attack on temporary files when the administrator runs (1) htpasswd or (2) htdigest, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2001-0131.


Provide references for further information: Can you share references or external links related to CVE-2002-1233?

{'name': 'DSA-188', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-188'}, {'name': '5990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5990'}, {'name': 'DSA-187', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-187'}, {'name': '5981', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5981'}, {'name': 'DSA-195', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-195'}, {'name': 'apache-htdigest-tmpfile-race(10413)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10413.php'}, {'name': '20021016 Apache 1.3.26', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103480856102007&w=2'}, {'name': 'apache-htpasswd-tmpfile-race(10412)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10412.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1233?


Explain the CVE ID: What does the identifier CVE-2002-1234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1234.


Provide references for further information: Can you share references or external links related to CVE-2002-1234?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1234?


Explain the CVE ID: What does the identifier CVE-2002-1235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1235.

The kadm_ser_in function in (1) the Kerberos v4compatibility administration daemon (kadmind4) in the MIT Kerberos 5 (krb5) krb5-1.2.6 and earlier, (2) kadmind in KTH Kerberos 4 (eBones) before 1.2.1, and (3) kadmind in KTH Kerberos 5 (Heimdal) before 0.5.1 when compiled with Kerberos 4 support, does not properly verify the length field of a request, which allows remote attackers to execute arbitrary code via a buffer overflow attack.


Provide references for further information: Can you share references or external links related to CVE-2002-1235?

{'name': '20021026 Updated: MITKRB5-SA-2002-002: Buffer overflow in kadmind4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103564944215101&w=2'}, {'name': 'NetBSD-SA2002-026', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2002-026.txt.asc'}, {'name': 'MDKSA-2002:073', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-073.php'}, {'name': '20021027 Re: Buffer overflow in kadmind4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103582805330339&w=2'}, {'name': '20021023 MITKRB5-SA-2002-002: Buffer overflow in kadmind4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103539530729206&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2002-002-kadm4.txt'}, {'name': 'DSA-185', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-185'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://web.mit.edu/kerberos/www/advisories/2002-002-kadm4_attacksig.txt'}, {'name': '20021028 GLSA: krb5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103582517126392&w=2'}, {'name': 'DSA-183', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-183'}, {'name': 'kerberos-kadmind-bo(10430)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10430.php'}, {'name': 'CLA-2002:534', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000534'}, {'name': 'CA-2002-29', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-29.html'}, {'name': 'DSA-184', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-184'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pdc.kth.se/heimdal/'}, {'name': 'VU#875073', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/875073'}, {'name': 'RHSA-2002:242', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-242.html'}, {'name': '20021027 KRB5-SORCERER2002-10-27 Security Update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-10/0399.html'}, {'name': '6024', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6024'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1235?


Explain the CVE ID: What does the identifier CVE-2002-1236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1236.

The remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a denial of service (crash) via an HTTP request to Gozila.cgi without any arguments.


Provide references for further information: Can you share references or external links related to CVE-2002-1236?

{'name': '20021101 iDEFENSE Security Advisory 10.31.02a: Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0049.html'}, {'name': '6086', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6086'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.31.02a.txt'}, {'name': 'linksys-etherfast-gozila-dos(10514)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10514.php'}, {'name': '20021101 iDEFENSE Security Advisory 10.31.02a: Denial of Service Vulnerability in Linksys BEFSR41 EtherFast Cable/DSL Router', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103616324103171&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1236?


Explain the CVE ID: What does the identifier CVE-2002-1238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1238.

Peter Sandvik's Simple Web Server 0.5.1 and earlier allows remote attackers to bypass access restrictions for files via an HTTP request with a sequence of multiple / (slash) characters such as http://www.example.com///file/.


Provide references for further information: Can you share references or external links related to CVE-2002-1238?

{'name': '6145', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6145'}, {'name': 'simple-server-file-access(10563)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10563'}, {'name': '20021108 iDEFENSE Security Advisory 11.08.02a: File Disclosure Vulnerability in Simple Web Server', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0065.html'}, {'name': '20021108 iDEFENSE Security Advisory 11.08.02a: File Disclosure Vulnerability in Simple Web Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103679016031857&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.08.02a.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1238?


Explain the CVE ID: What does the identifier CVE-2002-1239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1239.

QNX Neutrino RTOS 6.2.0 uses the PATH environment variable to find and execute the cp program while operating at raised privileges, which allows local users to gain privileges by modifying the PATH to point to a malicious cp program.


Provide references for further information: Can you share references or external links related to CVE-2002-1239?

{'name': '20021108 iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0066.html'}, {'name': '20021108 iDEFENSE Security Advisory 11.08.02b: Non-Explicit Path Vulnerability in QNX Neutrino RTOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103679043232178&w=2'}, {'name': '6146', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6146'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.08.02b.txt'}, {'name': 'qnx-rtos-gain-privileges(10564)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10564.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1239?


Explain the CVE ID: What does the identifier CVE-2002-1242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1242.

SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain privileges via the "bio" argument to modules.php.


Provide references for further information: Can you share references or external links related to CVE-2002-1242?

{'name': '20021101 iDEFENSE Security Advisory 10.31.02c: PHP-Nuke SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0051.html'}, {'name': '6088', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6088'}, {'name': '20021101 iDEFENSE Security Advisory 10.31.02c: PHP-Nuke SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103616324103171&w=2'}, {'name': 'phpnuke-accountmanager-sql-injection(10516)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10516.php'}, {'name': '6244', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6244'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/10.31.02c.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1242?


Explain the CVE ID: What does the identifier CVE-2002-1244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1244.

Format string vulnerability in Pablo FTP Server 1.5, 1.3, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format strings in the USER command.


Provide references for further information: Can you share references or external links related to CVE-2002-1244?

{'name': '6099', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6099'}, {'name': '4996', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4996'}, {'name': '20021104 iDEFENSE Security Advisory 11.04.02a: Pablo FTP Server DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0057.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.pablovandermeer.nl/ftpserver.zip'}, {'name': '20021104 iDEFENSE Security Advisory 11.04.02a: Pablo FTP Server DoS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103642642802889&w=2'}, {'name': 'pablo-ftp-username-dos(10532)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10532.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1244?


Explain the CVE ID: What does the identifier CVE-2002-1245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1245.

Maped in LuxMan 0.41 uses the user-provided search path to find and execute the gzip program, which allows local users to modify /dev/mem and gain privileges via a modified PATH environment variable that points to a Trojan horse gzip program.


Provide references for further information: Can you share references or external links related to CVE-2002-1245?

{'name': 'DSA-189', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-189'}, {'name': '20021106 iDEFENSE Security Advisory 11.06.02: Non-Explicit Path Vulnerability in LuxMan', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103660334009855&w=2'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.06.02.txt'}, {'name': 'luxman-maped-read-memory(10549)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10549.php'}, {'name': '20021106 iDEFENSE Security Advisory 11.06.02: Non-Explicit Path Vulnerability in LuxMan', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0062.html'}, {'name': '6113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1245?


Explain the CVE ID: What does the identifier CVE-2002-1247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1247.

Buffer overflow in LISa allows local users to gain access to a raw socket via a long LOGNAME environment variable for the resLISa daemon.


Provide references for further information: Can you share references or external links related to CVE-2002-1247?

{'name': 'MDKSA-2002:080', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2002:080'}, {'name': 'DSA-193', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-193'}, {'name': '20021114 GLSA: kdelibs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103728981029342&w=2'}, {'name': '20021112 KDE Security Advisory: resLISa / LISa Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103712329102632&w=2'}, {'name': '20021111 iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103704823501757&w=2'}, {'name': 'N-020', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-020.shtml'}, {'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'name': 'kde-kdenetwork-reslisa-bo(10592)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10592.php'}, {'name': '20021111 iDEFENSE Security Advisory 11.11.02: Buffer Overflow in KDE resLISa', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0068.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.11.02.txt'}, {'name': '6157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6157'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1247?


Explain the CVE ID: What does the identifier CVE-2002-1248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1248.

Northern Solutions Xeneo Web Server 2.1.0.0, 2.0.759.6, and other versions before 2.1.5 allows remote attackers to cause a denial of service (crash) via a GET request for a "%" URI.


Provide references for further information: Can you share references or external links related to CVE-2002-1248?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.04.02b.txt'}, {'name': '6098', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6098'}, {'name': 'xeneo-php-dos(10534)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10534.php'}, {'name': '20021104 iDEFENSE Security Advisory 11.04.02b: Denial of Service Vulnerability in Xeneo Web Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103642597302308&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1248?


Explain the CVE ID: What does the identifier CVE-2002-1250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1250.

Buffer overflow in Abuse 2.00 and earlier allows local users to gain root privileges via a long -net command line argument.


Provide references for further information: Can you share references or external links related to CVE-2002-1250?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.01.02.txt'}, {'name': '6094', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6094'}, {'name': 'abuse-net-command-bo(10519)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10519.php'}, {'name': '20021101 iDEFENSE Security Advisory 11.01.02: Buffer Overflow Vulnerability in Abuse', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1250?


Explain the CVE ID: What does the identifier CVE-2002-1251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1251.

Buffer overflow in log2mail before 0.2.5.1 allows remote attackers to execute arbitrary code via a long log message.


Provide references for further information: Can you share references or external links related to CVE-2002-1251?

{'name': 'DSA-186', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-186'}, {'name': '6089', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6089'}, {'name': 'log2mail-log-file-bo(10527)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10527.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1251?


Explain the CVE ID: What does the identifier CVE-2002-1252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1252.

The Application Messaging Gateway for PeopleTools 8.1x before 8.19, as used in various PeopleSoft products, allows remote attackers to read arbitrary files via certain XML External Entities (XXE) fields in an HTTP POST request that is processed by the SimpleFileHandler handler.


Provide references for further information: Can you share references or external links related to CVE-2002-1252?

{'name': 'peoplesoft-xxe-read-files(10520)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10520.php'}, {'name': '20030120 PeopleSoft XML External Entities Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21811'}, {'name': '6647', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6647'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1252?


Explain the CVE ID: What does the identifier CVE-2002-1253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1253.

Abuse 2.00 and earlier allows local users to gain privileges via command line arguments that specify alternate Lisp scripts that run at escalated privileges, which can contain functions that execute commands or modify files.


Provide references for further information: Can you share references or external links related to CVE-2002-1253?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/11.01.02.txt'}, {'name': 'abuse-lisp-gain-privileges(11300)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11300.php'}, {'name': '20021101 iDEFENSE Security Advisory 11.01.02: Buffer Overflow Vulnerability in Abuse', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0055.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1253?


Explain the CVE ID: What does the identifier CVE-2002-1254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1254.

Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execute code, via cached methods and objects, aka "Cross Domain Verification via Cached Methods."


Provide references for further information: Can you share references or external links related to CVE-2002-1254?

{'name': '6028', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6028'}, {'name': 'MS02-066', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-066'}, {'name': '20021022 Vulnerable cached objects in IE (9 advisories in 1)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103530131201191&w=2'}, {'name': 'ie-cache-showmodaldialog-dom-access(10432)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10432'}, {'name': 'ie-cache-getelementsbytagname-dom-access(10438)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10438.php'}, {'name': 'ie-cache-getelementsbyname-dom-access(10437)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10437.php'}, {'name': 'oval:org.mitre.oval:def:388', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A388'}, {'name': 'ie-cache-getelementbyid-dom-access(10436)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10436.php'}, {'name': 'oval:org.mitre.oval:def:408', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A408'}, {'name': 'ie-cache-elementfrompoint-dom-access(10435)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10435.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.greymagic.com/adv/gm012-ie/'}, {'name': 'N-018', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-018.shtml'}, {'name': 'ie-cache-execcommand-dom-access(10439)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10439.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1254?


Explain the CVE ID: What does the identifier CVE-2002-1255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1255.

Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail."


Provide references for further information: Can you share references or external links related to CVE-2002-1255?

{'name': 'outlook-email-header-dos(10763)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10763'}, {'name': 'MS02-067', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-067'}, {'name': '6319', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6319'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1255?


Explain the CVE ID: What does the identifier CVE-2002-1256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1256.

The SMB signing capability in the Server Message Block (SMB) protocol in Microsoft Windows 2000 and Windows XP allows attackers to disable the digital signing settings in an SMB session to force the data to be sent unsigned, then inject data into the session without detection, e.g. by modifying group policy information sent from a domain controller.


Provide references for further information: Can you share references or external links related to CVE-2002-1256?

{'name': 'MS02-070', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-070'}, {'name': 'oval:org.mitre.oval:def:277', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A277'}, {'name': '6367', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6367'}, {'name': 'win-smb-policy-modification(10843)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10843'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1256?


Explain the CVE ID: What does the identifier CVE-2002-1257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1257.

Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.


Provide references for further information: Can you share references or external links related to CVE-2002-1257?

{'name': 'MS02-069', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069'}, {'name': '6371', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6371'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1257?


Explain the CVE ID: What does the identifier CVE-2002-1258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1258.

Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibly due to a parsing error.


Provide references for further information: Can you share references or external links related to CVE-2002-1258?

{'name': 'MS02-069', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069'}, {'name': 'oval:org.mitre.oval:def:582', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A582'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1258?


Explain the CVE ID: What does the identifier CVE-2002-1259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1259.


Provide references for further information: Can you share references or external links related to CVE-2002-1259?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1259?


Explain the CVE ID: What does the identifier CVE-2002-1260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1260.

The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access database contents via an untrusted Java applet.


Provide references for further information: Can you share references or external links related to CVE-2002-1260?

{'name': 'MS02-069', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069'}, {'name': 'N-026', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-026.shtml'}, {'name': '6379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6379'}, {'name': 'msvm-jdbc-gain-access(10833)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10833'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1260?


Explain the CVE ID: What does the identifier CVE-2002-1261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1261.


Provide references for further information: Can you share references or external links related to CVE-2002-1261?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1261?


Explain the CVE ID: What does the identifier CVE-2002-1262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1262.

Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2002-1262?

{'name': '20021125 Re: MS02-066 - fixes, gaps and incorrect statements', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103824668621672&w=2'}, {'name': '20021205 Notes on MS02-068, extensive downplaying of severity', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103910416824172&w=2'}, {'name': '20021125 RE: MS02-066 - fixes, gaps and incorrect statements', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103825484331857&w=2'}, {'name': '20021205 Notes on MS02-068, extensive downplaying of severity', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103909877717345&w=2'}, {'name': 'MS02-068', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-068'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1262?


Explain the CVE ID: What does the identifier CVE-2002-1263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1263.


Provide references for further information: Can you share references or external links related to CVE-2002-1263?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1263?


Explain the CVE ID: What does the identifier CVE-2002-1264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1264.

Buffer overflow in Oracle iSQL*Plus web application of the Oracle 9 database server allows remote attackers to execute arbitrary code via a long USERID parameter in the isqlplus URL.


Provide references for further information: Can you share references or external links related to CVE-2002-1264?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://technet.oracle.com/deploy/security/pdf/2002alert46rev1.pdf'}, {'name': '20021104 Oracle iSQL*Plus buffer overflow vulnerability (#NISR04112002)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103643298712284&w=2'}, {'name': 'oracle-isqlplus-userid-bo(10524)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10524.php'}, {'name': '20021104 Oracle iSQL*Plus buffer overflow vulnerability (#NISR04112002)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0060.html'}, {'name': '4013', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/4013'}, {'name': '6085', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6085'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1264?


Explain the CVE ID: What does the identifier CVE-2002-1265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1265.

The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service (hang).


Provide references for further information: Can you share references or external links related to CVE-2002-1265?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info.apple.com/usen/security/security_updates.html'}, {'name': 'oval:org.mitre.oval:def:2248', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2248'}, {'name': 'HPSBUX01020', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0800.1'}, {'name': 'sun-rpc-libc-dos(10539)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10539.php'}, {'name': '6103', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6103'}, {'name': '51082', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/51082'}, {'name': '20021103-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021103-01-P'}, {'name': 'VU#266817', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/266817'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1265?


Explain the CVE ID: What does the identifier CVE-2002-1266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1266.

Mac OS X 10.2.2 allows local users to gain privileges by mounting a disk image file that was created on another system, aka "Local User Privilege Elevation via Disk Image File."


Provide references for further information: Can you share references or external links related to CVE-2002-1266?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info.apple.com/usen/security/security_updates.html'}, {'name': '7057', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7057'}, {'name': 'macos-disk-image-privileges(10818)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10818'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1266?


Explain the CVE ID: What does the identifier CVE-2002-1267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1267.

Mac OS X 10.2.2 allows remote attackers to cause a denial of service by accessing the CUPS Printing Web Administration utility, aka "CUPS Printing Web Administration is Remotely Accessible."


Provide references for further information: Can you share references or external links related to CVE-2002-1267?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info.apple.com/usen/security/security_updates.html'}, {'name': 'macos-cups-dos(10824)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10824'}, {'name': '7058', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7058'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1267?


Explain the CVE ID: What does the identifier CVE-2002-1268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1268.

Mac OS X 10.2.2 allows local users to gain privileges via a mounted ISO 9600 CD, aka "User Privilege Elevation via Mounting an ISO 9600 CD."


Provide references for further information: Can you share references or external links related to CVE-2002-1268?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info.apple.com/usen/security/security_updates.html'}, {'name': 'macos-iso9600-gain-privileges(10828)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10828'}, {'name': '7059', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7059'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1268?


Explain the CVE ID: What does the identifier CVE-2002-1269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1269.

Unknown vulnerability in NetInfo Manager application in Mac OS X 10.2.2 allows local users to access restricted parts of a filesystem.


Provide references for further information: Can you share references or external links related to CVE-2002-1269?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info.apple.com/usen/security/security_updates.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1269?


Explain the CVE ID: What does the identifier CVE-2002-1270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1270.

Mac OS X 10.2.2 allows local users to read files that only allow write access via the map_fd() Mach system call.


Provide references for further information: Can you share references or external links related to CVE-2002-1270?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.info.apple.com/usen/security/security_updates.html'}, {'name': 'macos-mach-read-files(10829)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10829'}, {'name': '7060', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7060'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1270?


Explain the CVE ID: What does the identifier CVE-2002-1271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1271.

The Mail::Mailer Perl module in the perl-MailTools package 1.47 and earlier uses mailx as the default mailer, which allows remote attackers to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.


Provide references for further information: Can you share references or external links related to CVE-2002-1271?

{'name': 'DSA-386', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-386'}, {'name': 'mail-mailer-command-execution(10548)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10548.php'}, {'name': '20021106 GLSA: MailTools', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103659723101369&w=2'}, {'name': '20021108 [Security Announce] Re: MDKSA-2002:076 - perl-MailTools update', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103679569705086&w=2'}, {'name': '6104', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6104'}, {'name': 'MDKSA-2002:076', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-076.php'}, {'name': 'SuSE-SA:2002:041', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_041_perl_mailtools.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1271?


Explain the CVE ID: What does the identifier CVE-2002-1272 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1272.

Alcatel OmniSwitch 7700/7800 switches running AOS 5.1.1 contains a back door telnet server that was intended for development but not removed before distribution, which allows remote attackers to gain administrative privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-1272?

{'name': 'alcatel-omniswitch-backdoor(10664)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10664'}, {'name': '6220', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6220'}, {'name': 'CA-2002-32', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-32.html'}, {'name': 'VU#181721', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/181721'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1272?


Explain the CVE ID: What does the identifier CVE-2002-1275 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1275.

Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."


Provide references for further information: Can you share references or external links related to CVE-2002-1275?

{'name': 'SuSE-SA:2002:040', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html'}, {'name': '6079', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6079'}, {'name': 'DSA-192', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-192'}, {'name': 'lprng-html2ps-command-execution(10526)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10526.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1275?


Explain the CVE ID: What does the identifier CVE-2002-1276 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1276.

An incomplete fix for a cross-site scripting (XSS) vulnerability in SquirrelMail 1.2.8 calls the strip_tags function on the PHP_SELF value but does not save the result back to that variable, leaving it open to cross-site scripting attacks.


Provide references for further information: Can you share references or external links related to CVE-2002-1276?

{'name': 'DSA-191', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-191'}, {'name': '7019', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/7019'}, {'name': 'squirrelmail-striptags-phpself-xss(10634)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10634.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=167471'}, {'name': '8220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8220'}, {'name': 'RHSA-2003:042', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-042.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1276?


Explain the CVE ID: What does the identifier CVE-2002-1277 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1277.

Buffer overflow in Window Maker (wmaker) 0.80.0 and earlier may allow remote attackers to execute arbitrary code via a certain image file that is not properly handled when Window Maker uses width and height information to allocate a buffer.


Provide references for further information: Can you share references or external links related to CVE-2002-1277?

{'name': 'CLA-2002:548', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000548'}, {'name': 'MDKSA-2002:085', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-085.php'}, {'name': 'RHSA-2003:043', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-043.html'}, {'name': '6119', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6119'}, {'name': 'DSA-190', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-190'}, {'name': 'RHSA-2003:009', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-009.html'}, {'name': 'window-maker-image-bo(10560)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10560.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1277?


Explain the CVE ID: What does the identifier CVE-2002-1278 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1278.

The mailconf module in Linuxconf 1.24, and other versions before 1.28, on Conectiva Linux 6.0 through 8, and possibly other distributions, generates the Sendmail configuration file (sendmail.cf) in a way that configures Sendmail to run as an open mail relay, which allows remote attackers to send Spam email.


Provide references for further information: Can you share references or external links related to CVE-2002-1278?

{'name': 'linuxconf-sendmail-mail-relay(10554)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10554.php'}, {'name': '6066', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6066'}, {'name': 'CLA-2002:544', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000544'}, {'name': '6118', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6118'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1278?


Explain the CVE ID: What does the identifier CVE-2002-1279 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1279.

Multiple buffer overflows in conf.c for Masqmail 0.1.x before 0.1.17, and 0.2.x before 0.2.15, allow local users to gain privileges via certain entries in the configuration file (-C option).


Provide references for further information: Can you share references or external links related to CVE-2002-1279?

{'name': 'DSA-194', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-194'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.masqmail.cx/pipermail/masqmail/2002-November/000041.html'}, {'name': '6164', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6164'}, {'name': 'masqmail-bo(10605)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10605.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.masqmail.cx/pipermail/masqmail/2002-November/000040.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1279?


Explain the CVE ID: What does the identifier CVE-2002-1280 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1280.

Memory leak in RealSecure Event Collector 6.5 allows attackers to cause a denial of service (memory consumption and crash).


Provide references for further information: Can you share references or external links related to CVE-2002-1280?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.isskk.co.jp/support/XPressUpdates/RS/RS65ECSR15RNj.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1280?


Explain the CVE ID: What does the identifier CVE-2002-1281 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1281.

Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.


Provide references for further information: Can you share references or external links related to CVE-2002-1281?

{'name': 'CSSA-2003-012.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt'}, {'name': 'kde-rlogin-command-execution(10602)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10602.php'}, {'name': '20021114 GLSA: kdelibs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103728981029342&w=2'}, {'name': '8298', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8298'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20021111-1.txt'}, {'name': 'MDKSA-2002:079', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php'}, {'name': '20021112 KDE Security Advisory: rlogin.protocol and telnet.protocol URL KIO Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103712550205730&w=2'}, {'name': 'DSA-204', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-204'}, {'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'name': '6182', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6182'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1281?


Explain the CVE ID: What does the identifier CVE-2002-1282 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1282.

Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL.


Provide references for further information: Can you share references or external links related to CVE-2002-1282?

{'name': 'CSSA-2003-012.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-012.0.txt'}, {'name': '20021114 GLSA: kdelibs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103728981029342&w=2'}, {'name': '8298', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8298'}, {'name': 'kde-telnet-command-execution(10603)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10603.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20021111-1.txt'}, {'name': 'MDKSA-2002:079', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-079.php'}, {'name': '20021112 KDE Security Advisory: rlogin.protocol and telnet.protocol URL KIO Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103712550205730&w=2'}, {'name': 'DSA-204', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-204'}, {'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'name': '6182', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6182'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1282?


Explain the CVE ID: What does the identifier CVE-2002-1283 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1283.

Buffer overflow in Novell iManager (eMFrame) before 1.5 allows remote attackers to cause a denial of service via an authentication request with a long Distinguished Name (DN) attribute.


Provide references for further information: Can you share references or external links related to CVE-2002-1283?

{'name': 'novell-imanager-dnattribute-dos(44969)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/44969'}, {'name': '6154', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6154'}, {'name': '20021111 NOVL-2002-2963651 - iManager (eMFrame) Buffer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103703760321408&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/servlet/tidfinder/2963651'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1283?


Explain the CVE ID: What does the identifier CVE-2002-1284 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1284.

The wizard in KGPG 0.6 through 0.8.2 does not properly provide the passphrase to gpg when creating new keys, which causes secret keys to be created with an empty passphrase and allows local attackers to steal the keys if they can be read.


Provide references for further information: Can you share references or external links related to CVE-2002-1284?

{'name': 'kgpg-wizard-empty-password(10629)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10629'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://devel-home.kde.org/~kgpg/bug.html'}, {'name': '6152', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6152'}, {'name': '20021110 GLSA: kgpg', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103702926611286&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1284?


Explain the CVE ID: What does the identifier CVE-2002-1285 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1285.

runlpr in the LPRng package allows the local lp user to gain root privileges via certain command line arguments.


Provide references for further information: Can you share references or external links related to CVE-2002-1285?

{'name': '6077', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6077'}, {'name': 'SuSE-SA:2002:040', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_040_lprng_html2ps.html'}, {'name': 'lprng-runlpr-gain-privileges(10525)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10525.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1285?


Explain the CVE ID: What does the identifier CVE-2002-1286 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1286.

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to steal cookies and execute script in a different security context via a URL that contains a colon in the domain portion, which is not properly parsed and loads an applet from a malicious site within the security context of the site that is being visited by the user.


Provide references for further information: Can you share references or external links related to CVE-2002-1286?

{'name': 'VU#657625', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/657625'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': '6142', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6142'}, {'name': 'msvm-java-applet-redirect(10579)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10579'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1286?


Explain the CVE ID: What does the identifier CVE-2002-1287 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1287.

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass.


Provide references for further information: Can you share references or external links related to CVE-2002-1287?

{'name': 'msvm-class-loader-bo(10580)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10580.php'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': '6134', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6134'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1287?


Explain the CVE ID: What does the identifier CVE-2002-1288 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1288.

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to determine the current directory of the Internet Explorer process via the getAbsolutePath() method in a File() call.


Provide references for further information: Can you share references or external links related to CVE-2002-1288?

{'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': '6139', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6139'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1288?


Explain the CVE ID: What does the identifier CVE-2002-1289 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1289.

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service (crash), and possibly execute arbitrary code via the getNativeServices function, which creates an instance of the com.ms.awt.peer.INativeServices (INativeServices) class, whose methods do not verify the memory addresses that are passed as parameters.


Provide references for further information: Can you share references or external links related to CVE-2002-1289?

{'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': 'msvm-inativeservices-memory-access(10582)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10582.php'}, {'name': '6140', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6140'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1289?


Explain the CVE ID: What does the identifier CVE-2002-1290 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1290.

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read and modify the contents of the Clipboard via an applet that accesses the (1) ClipBoardGetText and (2) ClipBoardSetText methods of the INativeServices class.


Provide references for further information: Can you share references or external links related to CVE-2002-1290?

{'name': '6132', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6132'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': 'msvm-inativeservices-clipboard-access(10583)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10583.php'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1290?


Explain the CVE ID: What does the identifier CVE-2002-1291 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1291.

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" (null character) URL.


Provide references for further information: Can you share references or external links related to CVE-2002-1291?

{'name': 'msvm-codebase-read-files(10584)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10584.php'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': '6138', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6138'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1291?


Explain the CVE ID: What does the identifier CVE-2002-1292 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1292.

The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.ms.security.StandardSecurityManager) and bypass intended StandardSecurityManager restrictions by modifying the (1) deniedDefinitionPackages or (2) deniedAccessPackages settings, causing a denial of service by adding Java applets to the list of applets that are prevented from running.


Provide references for further information: Can you share references or external links related to CVE-2002-1292?

{'name': 'msvm-ssm-restriction-bypass(10585)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10585'}, {'name': 'MS02-069', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069'}, {'name': '6133', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6133'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': 'VU#237777', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/237777'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1292?


Explain the CVE ID: What does the identifier CVE-2002-1293 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1293.

The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method.


Provide references for further information: Can you share references or external links related to CVE-2002-1293?

{'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': 'msvm-cabcracker-load-archive(10586)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10586.php'}, {'name': '6137', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6137'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1293?


Explain the CVE ID: What does the identifier CVE-2002-1294 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1294.

The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows remote attackers to cause a denial of service (crash due to illegal memory accesses) and possibly conduct other unauthorized activities via an applet that uses those references to access proprietary Microsoft methods.


Provide references for further information: Can you share references or external links related to CVE-2002-1294?

{'name': 'msvm-html-object-dos(10587)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10587.php'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': '6135', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6135'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1294?


Explain the CVE ID: What does the identifier CVE-2002-1295 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1295.

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka "Incomplete Java Object Instantiation Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2002-1295?

{'name': '6136', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6136'}, {'name': 'MS02-069', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=103684360031565&w=2'}, {'name': 'msvm-html-applet-dos(10588)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10588.php'}, {'name': '20021108 Technical information about unpatched MS Java vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103682630823080&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1295?


Explain the CVE ID: What does the identifier CVE-2002-1296 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1296.

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pc_clname field of a pcinfo_t structure, which cause priocntl to load a malicious kernel module.


Provide references for further information: Can you share references or external links related to CVE-2002-1296?

{'name': 'VU#683673', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/683673'}, {'name': 'solaris-priocntl-pcclname-modules(10717)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10717.php'}, {'name': 'oval:org.mitre.oval:def:3637', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3637'}, {'name': '6262', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6262'}, {'name': '20021127 Solaris priocntl exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103842619803173&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fsalert/49131'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1296?


Explain the CVE ID: What does the identifier CVE-2002-1297 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1297.


Provide references for further information: Can you share references or external links related to CVE-2002-1297?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1297?


Explain the CVE ID: What does the identifier CVE-2002-1298 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1298.


Provide references for further information: Can you share references or external links related to CVE-2002-1298?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1298?


Explain the CVE ID: What does the identifier CVE-2002-1299 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1299.


Provide references for further information: Can you share references or external links related to CVE-2002-1299?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1299?


Explain the CVE ID: What does the identifier CVE-2002-1300 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1300.


Provide references for further information: Can you share references or external links related to CVE-2002-1300?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1300?


Explain the CVE ID: What does the identifier CVE-2002-1301 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1301.


Provide references for further information: Can you share references or external links related to CVE-2002-1301?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1301?


Explain the CVE ID: What does the identifier CVE-2002-1302 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1302.


Provide references for further information: Can you share references or external links related to CVE-2002-1302?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1302?


Explain the CVE ID: What does the identifier CVE-2002-1303 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1303.


Provide references for further information: Can you share references or external links related to CVE-2002-1303?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1303?


Explain the CVE ID: What does the identifier CVE-2002-1304 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1304.


Provide references for further information: Can you share references or external links related to CVE-2002-1304?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1304?


Explain the CVE ID: What does the identifier CVE-2002-1305 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1305.


Provide references for further information: Can you share references or external links related to CVE-2002-1305?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1305?


Explain the CVE ID: What does the identifier CVE-2002-1306 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1306.

Multiple buffer overflows in LISa on KDE 2.x for 2.1 and later, and KDE 3.x before 3.0.4, allow (1) local and possibly remote attackers to execute arbitrary code via the "lisa" daemon, and (2) remote attackers to execute arbitrary code via a certain "lan://" URL.


Provide references for further information: Can you share references or external links related to CVE-2002-1306?

{'name': 'MDKSA-2002:080', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-080.php'}, {'name': '20021114 GLSA: kdelibs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103728981029342&w=2'}, {'name': '20021112 KDE Security Advisory: resLISa / LISa Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103712329102632&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kde.org/info/security/advisory-20021111-2.txt'}, {'name': 'kde-kdenetwork-lisa-bo(10597)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10597.php'}, {'name': 'N-020', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-020.shtml'}, {'name': 'kde-kdenetwork-lan-bo(10598)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10598.php'}, {'name': 'DSA-214', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-214'}, {'name': 'RHSA-2002:220', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-220.html'}, {'name': 'SuSE-SA:2002:042', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_042_kdenetwork.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1306?


Explain the CVE ID: What does the identifier CVE-2002-1307 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1307.

Cross-site scripting vulnerability (XSS) in MHonArc 2.5.12 and earlier allows remote attackers to insert script or HTML via an email message with the script in a MIME header name.


Provide references for further information: Can you share references or external links related to CVE-2002-1307?

{'name': 'mhonarc-mime-header-xss(10666)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10666'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.mhonarc.org/archive/cgi-bin/mesg.cgi?a=mhonarc-users&i=200210211713.g9LHDXE02256%40mcguire.earlhood.com'}, {'name': '6204', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6204'}, {'name': 'DSA-199', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-199'}, {'name': '7353', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/7353'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1307?


Explain the CVE ID: What does the identifier CVE-2002-1308 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1308.

Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression.


Provide references for further information: Can you share references or external links related to CVE-2002-1308?

{'name': '20021114 Netscape/Mozilla: Exploitable heap corruption via jar: URI handler.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103730181813075&w=2'}, {'name': 'mozilla-netscape-jar-bo(10636)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10636'}, {'name': '6185', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6185'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugzilla.mozilla.org/show_bug.cgi?id=157646'}, {'name': 'RHSA-2003:163', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-163.html'}, {'name': 'RHSA-2003:162', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-162.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1308?


Explain the CVE ID: What does the identifier CVE-2002-1309 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1309.

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia ColdFusion 6.0 allows remote attackers to execute arbitrary via an HTTP GET request with a long .cfm file name.


Provide references for further information: Can you share references or external links related to CVE-2002-1309?

{'name': '20021119 Update: EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&r=1&b=200211&w=2'}, {'name': 'AD20021112', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD20021112.html'}, {'name': '20021112 EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-11/0149.html'}, {'name': '20021119 Update: EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0080.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1309?


Explain the CVE ID: What does the identifier CVE-2002-1310 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1310.

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name.


Provide references for further information: Can you share references or external links related to CVE-2002-1310?

{'name': '6122', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6122'}, {'name': '20021119 Update: EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&r=1&b=200211&w=2'}, {'name': 'AD20021112', 'tags': ['third-party-advisory', 'x_refsource_EEYE'], 'url': 'http://www.eeye.com/html/Research/Advisories/AD20021112.html'}, {'name': '20021112 EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-11/0149.html'}, {'name': 'jrun-long-url-bo(10568)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10568'}, {'name': '20021119 Update: EEYE: Macromedia ColdFusion/JRun Remote SYSTEM Buffer Overflow Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0080.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1310?


Explain the CVE ID: What does the identifier CVE-2002-1311 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1311.

Courier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary files.