Explain the CVE ID: What does the identifier CVE-2002-0542 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0542.

mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape character in a message even when it is not in interactive mode, which could allow local users to gain root privileges via calls to mail in cron.


Provide references for further information: Can you share references or external links related to CVE-2002-0542?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.openbsd.org/errata30.html#mail'}, {'name': '20020411 OpenBSD Local Root Compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101855467811695&w=2'}, {'name': '4495', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4495'}, {'name': 'openbsd-mail-root-privileges(8818)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8818.php'}, {'name': '20020411 local root compromise in openbsd 3.0 and below', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/267089'}, {'name': '5269', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5269'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0542?


Explain the CVE ID: What does the identifier CVE-2002-0543 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0543.

Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2002-0543?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.aprelium.com/forum/viewtopic.php?t=24'}, {'name': 'abyss-unicode-directory-traversal(8805)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8805.php'}, {'name': '20020409 Abyss Webserver 1.0 Administration password file retrieval exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0110.html'}, {'name': '4466', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4466'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0543?


Explain the CVE ID: What does the identifier CVE-2002-0544 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0544.

Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the administrative console password in plaintext in the abyss.conf file, which allows local users with access to the file to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0544?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.aprelium.com/news/abws103.html'}, {'name': '4467', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4467'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0544?


Explain the CVE ID: What does the identifier CVE-2002-0545 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0545.

Cisco Aironet before 11.21 with Telnet enabled allows remote attackers to cause a denial of service (reboot) via a series of login attempts with invalid usernames and passwords.


Provide references for further information: Can you share references or external links related to CVE-2002-0545?

{'name': 'cisco-aironet-telnet-dos(8788)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8788.php'}, {'name': '20020409 Aironet Telnet Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/Aironet-Telnet.shtml'}, {'name': '4461', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4461'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0545?


Explain the CVE ID: What does the identifier CVE-2002-0546 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0546.

Cross-site scripting vulnerability in the mini-browser for Winamp 2.78 and 2.79 allows remote attackers to execute script via an ID3v1 or ID3v2 tag in an MP3 file.


Provide references for further information: Can you share references or external links related to CVE-2002-0546?

{'name': '20020403 Re: Winamp: Mp3 file can control the minibrowser', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0049.html'}, {'name': '20020403 Winamp: Mp3 file can control the minibrowser', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0026.html'}, {'name': 'winamp-mp3-browser-css(8753)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8753.php'}, {'name': '4414', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4414'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0546?


Explain the CVE ID: What does the identifier CVE-2002-0547 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0547.

Buffer overflow in the mini-browser for Winamp 2.79 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the title field of an ID3v2 tag.


Provide references for further information: Can you share references or external links related to CVE-2002-0547?

{'name': 'winamp-mp3-id3v2-bo(8946)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8946.php'}, {'name': '4609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4609'}, {'name': '20020426 Mp3 file can execute code in Winamp [Sandblad advisory #5]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0373.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.winamp.com/download/newfeatures.jhtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0547?


Explain the CVE ID: What does the identifier CVE-2002-0548 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0548.

Anthill allows remote attackers to bypass authentication and file bug reports by directly accessing the postbug.php program instead of enterbug.php.


Provide references for further information: Can you share references or external links related to CVE-2002-0548?

{'name': '20020406 Anthill login and JavaScript vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0089.html'}, {'name': 'anthill-postbug-auth-bypass(8771)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8771.php'}, {'name': '4443', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4443'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0548?


Explain the CVE ID: What does the identifier CVE-2002-0549 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0549.

Cross-site scripting vulnerabilities in Anthill allow remote attackers to execute script as other Anthill users.


Provide references for further information: Can you share references or external links related to CVE-2002-0549?

{'name': '20020406 Anthill login and JavaScript vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0089.html'}, {'name': 'anthill-bug-tracking-css(8770)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8770.php'}, {'name': '4442', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4442'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0549?


Explain the CVE ID: What does the identifier CVE-2002-0550 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0550.

Dynamic Guestbook 3.0 allows remote attackers to execute arbitrary code via shell metacharacters in the gbdaten parameter.


Provide references for further information: Can you share references or external links related to CVE-2002-0550?

{'name': 'dynamic-guestbook-command-execution(8762)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8762.php'}, {'name': '20020403 Dynamic Guestbook V3.0 Cross Site Scripting and Arbitrary Command Execution under certain circumstances', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html'}, {'name': '4423', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4423'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0550?


Explain the CVE ID: What does the identifier CVE-2002-0551 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0551.

Cross-site scripting vulnerability in Dynamic Guestbook 3.0 allows remote attackers to execute code in clients who access guestbook pages via the parameters (1) name, (2) mail, or (3) kommentar.


Provide references for further information: Can you share references or external links related to CVE-2002-0551?

{'name': '4422', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4422'}, {'name': '20020403 Dynamic Guestbook V3.0 Cross Site Scripting and Arbitrary Command Execution under certain circumstances', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0052.html'}, {'name': 'dynamic-guestbook-css(8763)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8763.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0551?


Explain the CVE ID: What does the identifier CVE-2002-0552 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0552.

Multiple buffer overflows in Melange Chat server 2.02 allow remote or local attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a long argument in the /yell command, (2) long lines in the /etc/melange.conf configuration file, (3) long file names, or possibly other attacks.


Provide references for further information: Can you share references or external links related to CVE-2002-0552?

{'name': '4509', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4509'}, {'name': 'melange-chat-yell-bo(8842)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8842.php'}, {'name': '4510', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4510'}, {'name': '4508', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4508'}, {'name': 'melange-chat-config-bo(8845)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8845.php'}, {'name': 'melange-chat-filename-bo(8846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8846.php'}, {'name': '20020414 Vulnerabilities in the Melange Chat Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0157.html'}, {'name': '20020416 Melange Chat POC DOS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/267932'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0552?


Explain the CVE ID: What does the identifier CVE-2002-0553 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0553.

Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration.


Provide references for further information: Can you share references or external links related to CVE-2002-0553?

{'name': '4506', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4506'}, {'name': 'sunshop-new-cust-css(8840)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8840.php'}, {'name': '20020413 SunSop: cross-site-scripting bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0154.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0553?


Explain the CVE ID: What does the identifier CVE-2002-0554 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0554.

webdriver in IBM Informix Web DataBlade 4.12 allows remote attackers to bypass user access levels or read arbitrary files via a SQL injection attack in an HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2002-0554?

{'name': '4496', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4496'}, {'name': '20020411 IBM Informix Web DataBlade: SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0135.html'}, {'name': 'informix-wdm-sql-injection(8826)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8826.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0554?


Explain the CVE ID: What does the identifier CVE-2002-0555 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0555.

IBM Informix Web DataBlade 4.12 unescapes user input even if an application has escaped it, which could allow remote attackers to execute SQL code in a web form even when the developer has attempted to escape it.


Provide references for further information: Can you share references or external links related to CVE-2002-0555?

{'name': '4498', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4498'}, {'name': '20020411 IBM Informix Web DataBlade: Auto-decoding HTML entities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0137.html'}, {'name': 'informix-wbm-sql-decoding(8827)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8827.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0555?


Explain the CVE ID: What does the identifier CVE-2002-0556 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0556.

Directory traversal vulnerability in Quik-Serv HTTP server 1.1B allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.


Provide references for further information: Can you share references or external links related to CVE-2002-0556?

{'name': '20020403 Quik-Serv Web Server v1.1B Arbitrary File Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0051.html'}, {'name': 'quikserv-dot-directory-traversal(8754)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8754.php'}, {'name': '4425', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4425'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0556?


Explain the CVE ID: What does the identifier CVE-2002-0557 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0557.

Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes (1) rexec or (2) rsh to run another user's shell, or (3) atrun to change to a different user's directory, possibly due to memory allocation failures or an incorrect call to auth_approval().


Provide references for further information: Can you share references or external links related to CVE-2002-0557?

{'name': '20020319 016: SECURITY FIX: March 19, 2002', 'tags': ['vendor-advisory', 'x_refsource_OPENBSD'], 'url': 'http://www.openbsd.org/errata30.html#approval'}, {'name': 'bsd-yp-execute-shell(8625)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8625.php'}, {'name': '4338', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4338'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0557?


Explain the CVE ID: What does the identifier CVE-2002-0558 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0558.

Directory traversal vulnerability in TYPSoft FTP server 0.97.1 and earlier allows a remote authenticated user (possibly anonymous) to list arbitrary directories via a .. in a LIST (ls) command ending in wildcard *.* characters.


Provide references for further information: Can you share references or external links related to CVE-2002-0558?

{'name': '2489', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/2489'}, {'name': '20020407 Typsoft FTP Server: yet another directory traversal vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0090.html'}, {'name': 'typsoft-ftp-directory-traversal(6165)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/6165.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0558?


Explain the CVE ID: What does the identifier CVE-2002-0559 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0559.

Buffer overflows in PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allow remote attackers to cause a denial of service or execute arbitrary code via (1) a long help page request without a dadname, which overflows the resulting HTTP Location header, (2) a long HTTP request to the plsql module, (3) a long password in the HTTP Authorization, (4) a long Access Descriptor (DAD) password in the addadd form, or (5) a long cache directory name.


Provide references for further information: Can you share references or external links related to CVE-2002-0559?

{'name': 'VU#750299', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/750299'}, {'name': 'VU#878603', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/878603'}, {'name': 'oracle-appserver-plsql-adddad-bo(8098)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8098'}, {'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'name': 'VU#659043', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/659043'}, {'name': 'oracle-appserver-plsql-cache-bo(8097)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8097'}, {'name': 'oracle-appserver-plsql-authclient-bo(8096)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8096'}, {'name': '20020206 Multiple Buffer Overflows in Oracle 9iAS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/254426'}, {'name': 'VU#313280', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/313280'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'name': '4032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4032'}, {'name': 'oracle-appserver-plsql-bo(8095)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8095'}, {'name': 'VU#923395', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/923395'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0559?


Explain the CVE ID: What does the identifier CVE-2002-0560 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0560.

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to obtain sensitive information via the OWA_UTIL stored procedures (1) OWA_UTIL.signature, (2) OWA_UTIL.listprint, or (3) OWA_UTIL.show_query_columns.


Provide references for further information: Can you share references or external links related to CVE-2002-0560?

{'name': '20020206 Hackproofing Oracle Application Server paper', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101301813117562&w=2'}, {'name': 'VU#307835', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/307835'}, {'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'name': '4294', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4294'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0560?


Explain the CVE ID: What does the identifier CVE-2002-0561 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0561.

The default configuration of the PL/SQL Gateway web administration interface in Oracle 9i Application Server 1.0.2.x uses null authentication, which allows remote attackers to gain privileges and modify DAD settings.


Provide references for further information: Can you share references or external links related to CVE-2002-0561?

{'name': '20020206 Hackproofing Oracle Application Server paper', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101301813117562&w=2'}, {'name': '4292', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4292'}, {'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'name': 'VU#611776', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/611776'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0561?


Explain the CVE ID: What does the identifier CVE-2002-0562 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0562.

The default configuration of Oracle 9i Application Server 1.0.2.x running Oracle JSP or SQLJSP stores globals.jsa under the web root, which allows remote attackers to gain sensitive information including usernames and passwords via a direct HTTP request to globals.jsa.


Provide references for further information: Can you share references or external links related to CVE-2002-0562?

{'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'name': 'VU#698467', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/698467'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'name': '4034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4034'}, {'name': '20020206 JSP translation file access under Oracle 9iAS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101301440005580&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0562?


Explain the CVE ID: What does the identifier CVE-2002-0563 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0563.

The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring Services (1) dms0, (2) dms/DMSDump, (3) servlet/DMSDump, (4) servlet/Spy, (5) soap/servlet/Spy, and (6) dms/AggreSpy; and Oracle Java Process Manager (7) oprocmgr-status and (8) oprocmgr-service, which can be used to control Java processes.


Provide references for further information: Can you share references or external links related to CVE-2002-0563?

{'name': '4293', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4293'}, {'name': 'oracle-appserver-apache-services(8455)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8455'}, {'name': '20020206 Hackproofing Oracle Application Server paper', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101301813117562&w=2'}, {'name': '13152', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/13152'}, {'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'name': '1009167', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1009167'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.appsecinc.com/Policy/PolicyCheck7024.html'}, {'name': 'VU#168795', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/168795'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'name': '705', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/705'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0563?


Explain the CVE ID: What does the identifier CVE-2002-0564 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0564.

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to bypass authentication for a Database Access Descriptor (DAD) by modifying the URL to reference an alternate DAD that already has valid credentials.


Provide references for further information: Can you share references or external links related to CVE-2002-0564?

{'name': '20020206 Hackproofing Oracle Application Server paper', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101301813117562&w=2'}, {'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'name': 'VU#193523', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/193523'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0564?


Explain the CVE ID: What does the identifier CVE-2002-0565 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0565.

Oracle 9iAS 1.0.2.x compiles JSP files in the _pages directory with world-readable permissions under the web root, which allows remote attackers to obtain sensitive information derived from the JSP code, including usernames and passwords, via a direct HTTP request to _pages.


Provide references for further information: Can you share references or external links related to CVE-2002-0565?

{'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'name': 'VU#547459', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/547459'}, {'name': 'oracle-appserver-oraclejsp-view-info(8100)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8100'}, {'name': '4034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4034'}, {'name': '20020206 JSP translation file access under Oracle 9iAS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101301440005580&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0565?


Explain the CVE ID: What does the identifier CVE-2002-0566 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0566.

PL/SQL module 3.0.9.8.2 in Oracle 9i Application Server 1.0.2.x allows remote attackers to cause a denial of service (crash) via an HTTP Authorization header without an authentication type.


Provide references for further information: Can you share references or external links related to CVE-2002-0566?

{'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'name': '4037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4037'}, {'name': 'VU#805915', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/805915'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/ias_modplsql_alert.pdf'}, {'name': 'oracle-appserver-plsql-pls-dos(8099)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0566?


Explain the CVE ID: What does the identifier CVE-2002-0567 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0567.

Oracle 8i and 9i with PL/SQL package for External Procedures (EXTPROC) allows remote attackers to bypass authentication and execute arbitrary functions by using the TNS Listener to directly connect to the EXTPROC process.


Provide references for further information: Can you share references or external links related to CVE-2002-0567?

{'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'name': '20020206 Remote Compromise in Oracle 9i Database Server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101301332402079&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/plsextproc_alert.pdf'}, {'name': '4033', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4033'}, {'name': 'oracle-plsql-remote-access(8089)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8089'}, {'name': 'VU#180147', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/180147'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0567?


Explain the CVE ID: What does the identifier CVE-2002-0568 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0568.

Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.


Provide references for further information: Can you share references or external links related to CVE-2002-0568?

{'name': '20020206 Hackproofing Oracle Application Server paper', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101301813117562&w=2'}, {'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'name': '4290', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4290'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'name': 'VU#476619', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/476619'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0568?


Explain the CVE ID: What does the identifier CVE-2002-0569 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0569.

Oracle 9i Application Server allows remote attackers to bypass access restrictions for configuration files via a direct request to the XSQL Servlet (XSQLServlet).


Provide references for further information: Can you share references or external links related to CVE-2002-0569?

{'name': '20020206 Hackproofing Oracle Application Server paper', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101301813117562&w=2'}, {'name': 'CA-2002-08', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-08.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nextgenss.com/papers/hpoas.pdf'}, {'name': 'VU#977251', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/977251'}, {'name': 'oracle-appserver-config-file-access(8453)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8453.php'}, {'name': '4298', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4298'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0569?


Explain the CVE ID: What does the identifier CVE-2002-0570 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0570.

The encrypted loop device in Linux kernel 2.4.10 and earlier does not authenticate the entity that is encrypting data, which allows local users to modify encrypted data without knowing the key.


Provide references for further information: Can you share references or external links related to CVE-2002-0570?

{'name': '20020102 Vulnerability in encrypted loop device for linux', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-01/0010.html'}, {'name': '3775', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/3775'}, {'name': 'linux-loop-device-encryption(7769)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/7769'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0570?


Explain the CVE ID: What does the identifier CVE-2002-0571 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0571.

Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax.


Provide references for further information: Can you share references or external links related to CVE-2002-0571?

{'name': 'M-071', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/m-071.shtml'}, {'name': '20020416 ansi outer join syntax in Oracle allows access to any data', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0175.html'}, {'name': 'oracle-ansi-sql-bypass-acl(8855)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8855.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://otn.oracle.com/deploy/security/pdf/sql_joins_alert.pdf'}, {'name': '4523', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4523'}, {'name': '5236', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5236'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0571?


Explain the CVE ID: What does the identifier CVE-2002-0572 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0572.

FreeBSD 4.5 and earlier, and possibly other BSD-based operating systems, allows local users to write to or read from restricted files by closing the file descriptors 0 (standard input), 1 (standard output), or 2 (standard error), which may then be reused by a called setuid process that intended to perform I/O on normal files.


Provide references for further information: Can you share references or external links related to CVE-2002-0572?

{'name': 'bsd-suid-apps-gain-privileges(8920)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8920.php'}, {'name': '4568', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4568'}, {'name': 'VU#809347', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/809347'}, {'name': '6095', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6095'}, {'name': '20020422 Pine Internet Advisory: Setuid application execution may give local root in FreeBSD', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0033.html'}, {'name': 'FreeBSD-SA-02:23', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:23.stdio.asc'}, {'name': 'M-072', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/m-072.shtml'}, {'name': '20020422 Pine Internet Advisory: Setuid application execution may give local root in FreeBSD', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268970'}, {'name': '20020423 cheers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/269102'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0572?


Explain the CVE ID: What does the identifier CVE-2002-0573 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0573.

Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.


Provide references for further information: Can you share references or external links related to CVE-2002-0573?

{'name': '4639', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4639'}, {'name': 'VU#638099', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/638099'}, {'name': 'oval:org.mitre.oval:def:79', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A79'}, {'name': '778', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/778'}, {'name': 'oval:org.mitre.oval:def:41', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A41'}, {'name': 'CA-2002-10', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-10.html'}, {'name': '20020430 Adivosry + Exploit for Remote Root Hole in Default Installation of Popular Commercial Operating System', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270268'}, {'name': 'solaris-rwall-format-string(8971)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8971.php'}, {'name': '20020430 [VulnWatch] Adivosry + Exploit for Remote Root Hole in Default Installation of Popular Commercial Operating System', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0049.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0573?


Explain the CVE ID: What does the identifier CVE-2002-0574 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0574.

Memory leak in FreeBSD 4.5 and earlier allows remote attackers to cause a denial of service (memory exhaustion) via ICMP echo packets that trigger a bug in ip_output() in which the reference count for a routing table entry is not decremented, which prevents the entry from being removed.


Provide references for further information: Can you share references or external links related to CVE-2002-0574?

{'name': 'freebsd-icmp-echo-reply-dos(8893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8893.php'}, {'name': '5232', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5232'}, {'name': '4539', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4539'}, {'name': 'FreeBSD-SA-02:21', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:21.tcpip.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0574?


Explain the CVE ID: What does the identifier CVE-2002-0575 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0575.

Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0575?

{'name': 'openssh-sshd-kerberos-bo(8896)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8896.php'}, {'name': '20020420 OpenSSH Security Advisory (adv.token)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0298.html'}, {'name': '4560', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4560'}, {'name': 'CSSA-2002-022.2', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-022.2.txt'}, {'name': '20020419 OpenSSH 2.2.0 - 3.1.0 server contains a locally exploitable buffer overflow', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=101924296115863&w=2'}, {'name': '20020517 OpenSSH 3.2.2 released (fwd)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102167972421837&w=2'}, {'name': '20020426 Revised OpenSSH Security Advisory (adv.token)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/269701'}, {'name': '781', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/781'}, {'name': '20020419 OpenSSH 2.2.0 - 3.1.0 server contains a locally exploitable buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268718'}, {'name': '20020429 TSLSA-2002-0047 - openssh', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0394.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0575?


Explain the CVE ID: What does the identifier CVE-2002-0576 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0576.

ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.


Provide references for further information: Can you share references or external links related to CVE-2002-0576?

{'name': '4542', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4542'}, {'name': '20020418 KPMG-2002013: Coldfusion Path Disclosure', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268263'}, {'name': 'coldfusion-dos-device-path-disclosure(8866)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8866.php'}, {'name': '20020418 [VulnWatch] KPMG-2002013: Coldfusion Path Disclosure', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0028.html'}, {'name': '3337', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3337'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/v1/handlers/index.cfm?ID=22906'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0576?


Explain the CVE ID: What does the identifier CVE-2002-0577 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0577.

Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2002-0577?

{'name': '4582', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4582'}, {'name': 'oval:org.mitre.oval:def:5518', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5518'}, {'name': 'HPSBUX0204-191', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2002-q2/0023.html'}, {'name': 'VU#977779', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/977779'}, {'name': '656', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/656'}, {'name': 'hpux-passwd-dos(8939)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8939.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0577?


Explain the CVE ID: What does the identifier CVE-2002-0578 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0578.

Buffer overflow in 4D WebServer 6.7.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP request with Basic Authentication containing a long (1) user name or (2) password.


Provide references for further information: Can you share references or external links related to CVE-2002-0578?

{'name': '4665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4665'}, {'name': '20020502 iXsecurity.20020404.4d_webserver.a', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-05/0013.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0578?


Explain the CVE ID: What does the identifier CVE-2002-0579 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0579.

WorkforceROI Xpede 4.1 allows remote attackers to gain privileges as an Xpede administrator via a direct HTTP request to the /admin/adminproc.asp script, which does not prompt for a password.


Provide references for further information: Can you share references or external links related to CVE-2002-0579?

{'name': '4552', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4552'}, {'name': '20020419 Xpede many vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html'}, {'name': 'xpede-insecure-admin-scripts(8900)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8900.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0579?


Explain the CVE ID: What does the identifier CVE-2002-0580 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0580.

WorkforceROI Xpede 4.1 allows remote attackers to obtain the database username via a request to datasource.asp, which leaks the username in a form and allows the attacker to more easily conduct brute force password guessing attacks.


Provide references for further information: Can you share references or external links related to CVE-2002-0580?

{'name': 'xpede-datasource-reveal-account(8902)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8902.php'}, {'name': '20020419 Xpede many vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html'}, {'name': '4553', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4553'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0580?


Explain the CVE ID: What does the identifier CVE-2002-0581 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0581.

WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.


Provide references for further information: Can you share references or external links related to CVE-2002-0581?

{'name': '4555', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4555'}, {'name': 'xpede-sprc-sql-injection(8903)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8903.php'}, {'name': '20020419 Xpede many vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0581?


Explain the CVE ID: What does the identifier CVE-2002-0582 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0582.

WorkforceROI Xpede 4.1 stores temporary expense claim reports in a world-readable and indexable /reports/temp directory, which allows remote attackers to read the reports by accessing the directory.


Provide references for further information: Can you share references or external links related to CVE-2002-0582?

{'name': '4554', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4554'}, {'name': '20020419 Xpede many vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html'}, {'name': 'xpede-expense-directory-permissions(8905)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8905.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0582?


Explain the CVE ID: What does the identifier CVE-2002-0583 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0583.

WorkforceROI Xpede 4.1 uses a small random namespace (5 alphanumeric characters) for temporary expense claim reports in the /reports/temp directory, which allows remote attackers to read the reports via a brute force attack.


Provide references for further information: Can you share references or external links related to CVE-2002-0583?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0583?


Explain the CVE ID: What does the identifier CVE-2002-0584 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0584.

WorkforceROI Xpede 4.1 allows remote attackers to read user timesheets by modifying the TSN ID parameter to the ts_app_process.asp script, which is easily guessable because it is incremented by 1 for each new timesheet.


Provide references for further information: Can you share references or external links related to CVE-2002-0584?

{'name': '4556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4556'}, {'name': '20020419 Xpede many vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0273.html'}, {'name': 'xpede-timesheet-disclosure(8907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8907.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0584?


Explain the CVE ID: What does the identifier CVE-2002-0585 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0585.

Unknown vulnerability in ndd for HP-UX 11.11 with certain TRANSPORT patches allows attackers to cause a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2002-0585?

{'name': 'oval:org.mitre.oval:def:5490', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5490'}, {'name': 'hpux-ndd-dos(9020)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9020.php'}, {'name': 'HPSBUX0205-192', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://archives.neohapsis.com/archives/hp/2002-q2/0034.html'}, {'name': '4680', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4680'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0585?


Explain the CVE ID: What does the identifier CVE-2002-0586 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0586.

Format string vulnerability in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to execute arbitrary code via the Error or Notice parameters.


Provide references for further information: Can you share references or external links related to CVE-2002-0586?

{'name': 'aolserver-dbproxy-format-string(8860)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8860.php'}, {'name': '20020416 [CERT-intexxia] AOLServer DB Proxy Daemon Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html'}, {'name': '4535', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4535'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0586?


Explain the CVE ID: What does the identifier CVE-2002-0587 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0587.

Buffer overflow in Ns_PdLog function for the external database driver proxy daemon library (libnspd.a) of AOLServer 3.0 through 3.4.2 allows remote attackers to cause a denial of service or execute arbitrary code via the Error or Notice parameters.


Provide references for further information: Can you share references or external links related to CVE-2002-0587?

{'name': '20020416 [CERT-intexxia] AOLServer DB Proxy Daemon Format String Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0195.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/aolserver/aolserver/nspd/log.c.diff?r1=1.4&r2=1.4.6.1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/tracker/index.php?func=detail&aid=533141&group_id=3152&atid=303152'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0587?


Explain the CVE ID: What does the identifier CVE-2002-0588 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0588.

PVote before 1.9 does not authenticate users for restricted operations, which allows remote attackers to add or delete polls by modifying parameters to (1) add.php or (2) del.php.


Provide references for further information: Can you share references or external links related to CVE-2002-0588?

{'name': 'pvote-add-delete-polls(8877)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8877.php'}, {'name': '4540', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4540'}, {'name': '20020418 [[ TH 026 Inc. ]] SA #1 - Multiple vulnerabilities in PVote 1.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268231'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://orbit-net.net:8001/php/pvote/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0588?


Explain the CVE ID: What does the identifier CVE-2002-0589 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0589.

PVote before 1.9 allows remote attackers to change the administrative password and gain privileges by directly calling ch_info.php with the newpass and confirm parameters both set to the new password.


Provide references for further information: Can you share references or external links related to CVE-2002-0589?

{'name': '20020418 [[ TH 026 Inc. ]] SA #1 - Multiple vulnerabilities in PVote 1.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268231'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://orbit-net.net:8001/php/pvote/'}, {'name': '4541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4541'}, {'name': 'pvote-change-admin-password(8878)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8878.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0589?


Explain the CVE ID: What does the identifier CVE-2002-0590 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0590.

Cross-site scripting (CSS) vulnerability in IcrediBB 1.1 Beta allows remote attackers to execute arbitrary script and steal cookies as other IcrediBB users via the (1) title or (2) body of posts.


Provide references for further information: Can you share references or external links related to CVE-2002-0590?

{'name': 'incredibb-html-css(8879)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8879.php'}, {'name': '20020419 [[ TH 026 Inc. ]] SA #2 - IcrediBB 1.1, Cross Site Scripting vulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0263.html'}, {'name': '4548', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4548'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0590?


Explain the CVE ID: What does the identifier CVE-2002-0591 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0591.

Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8 beta and earlier allows remote attackers to create arbitrary files and execute commands via a Direct Connection with an IMG tag with a SRC attribute that specifies the target filename.


Provide references for further information: Can you share references or external links related to CVE-2002-0591?

{'name': 'aim-direct-connection-files(8870)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8870.php'}, {'name': '4526', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4526'}, {'name': "20020416 AIM's 'Direct Connection' feature could lead to arbitrary file creation", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0203.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0591?


Explain the CVE ID: What does the identifier CVE-2002-0592 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0592.

AOL Instant Messenger (AIM) allows remote attackers to steal files that are being transferred to other clients by connecting to port 4443 (Direct Connection) or port 5190 (file transfer) before the intended user.


Provide references for further information: Can you share references or external links related to CVE-2002-0592?

{'name': '20020421 AIM Remote File Transfer/Direct Connection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/269006'}, {'name': 'aim-hijack-connection(8931)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8931'}, {'name': '4574', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4574'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0592?


Explain the CVE ID: What does the identifier CVE-2002-0593 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0593.

Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.


Provide references for further information: Can you share references or external links related to CVE-2002-0593?

{'name': '8039', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8039'}, {'name': 'mozilla-netscape-irc-bo(8976)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8976.php'}, {'name': 'CLA-2002:490', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490'}, {'name': '4637', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4637'}, {'name': '20020430 RE: Reading local files in Netscape 6 and Mozilla (GM#001-NS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270249'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0593?


Explain the CVE ID: What does the identifier CVE-2002-0594 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0594.

Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.


Provide references for further information: Can you share references or external links related to CVE-2002-0594?

{'name': 'CLA-2002:490', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490'}, {'name': '20020430 RE: Reading local files in Netscape 6 and Mozilla (GM#001-NS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/270249'}, {'name': 'mozilla-css-files-exist(8977)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8977.php'}, {'name': 'RHSA-2003:046', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-046.html'}, {'name': '4640', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4640'}, {'name': 'RHSA-2002:192', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-192.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0594?


Explain the CVE ID: What does the identifier CVE-2002-0595 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0595.

Buffer overflow in WTRS_UI.EXE (WTX_REMOTE.DLL) for WebTrends Reporting Center 4.0d allows remote attackers to execute arbitrary code via a long HTTP GET request to the /reports/ directory.


Provide references for further information: Can you share references or external links related to CVE-2002-0595?

{'name': '20020416 Webtrends Reporting Center Buffer Overflow (#NISR17042002C)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.html'}, {'name': '4531', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4531'}, {'name': 'webtrends-long-string-bo(8864)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8864.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0595?


Explain the CVE ID: What does the identifier CVE-2002-0596 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0596.

WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.


Provide references for further information: Can you share references or external links related to CVE-2002-0596?

{'name': 'webtrends-profile-path-disclosure(8865)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8865.php'}, {'name': '20020416 Webtrends Reporting Center Buffer Overflow (#NISR17042002C)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0207.html'}, {'name': '10447', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/10447'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngssoftware.com/advisories/wtr.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0596?


Explain the CVE ID: What does the identifier CVE-2002-0597 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0597.

LANMAN service on Microsoft Windows 2000 allows remote attackers to cause a denial of service (CPU/memory exhaustion) via a stream of malformed data to microsoft-ds port 445.


Provide references for further information: Can you share references or external links related to CVE-2002-0597?

{'name': 'VU#693099', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/693099'}, {'name': '5179', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5179'}, {'name': 'win2k-lanman-dos(8867)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8867.php'}, {'name': '4532', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4532'}, {'name': '20020417 [VulnWatch] KPMG-2002011: Windows 2000 microsoft-ds Denial of Service', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0025.html'}, {'name': '20020417 KPMG-2002011: Windows 2000 microsoft-ds Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268066'}, {'name': 'Q320751', 'tags': ['vendor-advisory', 'x_refsource_MSKB'], 'url': 'http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ320751'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0597?


Explain the CVE ID: What does the identifier CVE-2002-0598 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0598.

Format string vulnerability in Foundstone FScan 1.12 with banner grabbing enabled allows remote attackers to execute arbitrary code on the scanning system via format string specifiers in the server banner.


Provide references for further information: Can you share references or external links related to CVE-2002-0598?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.foundstone.com/knowledge/fscan112_advisory.html'}, {'name': '4549', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4549'}, {'name': 'fscan-banner-format-string(8895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8895.php'}, {'name': '20020419 KPMG-2002014: Foundstone Fscan Format String Bug', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://online.securityfocus.com/archive/1/268581'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0598?


Explain the CVE ID: What does the identifier CVE-2002-0599 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0599.

Blahz-DNS 0.2 and earlier allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs such as dostuff.php instead of going through the login screen.


Provide references for further information: Can you share references or external links related to CVE-2002-0599?

{'name': '5178', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5178'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=87004'}, {'name': 'blahzdns-auth-bypass(8951)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8951.php'}, {'name': '20020428 Blahz-DNS: Authentication bypass vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0395.html'}, {'name': '4618', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4618'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0599?


Explain the CVE ID: What does the identifier CVE-2002-0600 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0600.

Heap overflow in the KTH Kerberos 4 FTP client 4-1.1.1 allows remote malicious servers to execute arbitrary code on the client via a long response to a passive (PASV) mode request.


Provide references for further information: Can you share references or external links related to CVE-2002-0600?

{'name': 'kerberos4-ftp-client-overflow(8938)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8938.php'}, {'name': '4592', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4592'}, {'name': '20020424 A bug in the Kerberos4 ftp client may cause heap overflow which leads to remote code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0339.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0600?


Explain the CVE ID: What does the identifier CVE-2002-0601 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0601.

ISS RealSecure Network Sensor 5.x through 6.5 allows remote attackers to cause a denial of service (crash) via malformed DHCP packets that cause RealSecure to dereference a null pointer.


Provide references for further information: Can you share references or external links related to CVE-2002-0601?

{'name': '5165', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5165'}, {'name': '20020430 Remote Denial of Service Vulnerability in RealSecure Network Sensor', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/security_center/alerts/advise116.php'}, {'name': 'rs-ns-dhcp-dos(8961)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8961.php'}, {'name': '20020430 ISS Advisory: Remote Denial of Service Vulnerability in RealSecure Network Sensor', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0420.html'}, {'name': '4649', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4649'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0601?


Explain the CVE ID: What does the identifier CVE-2002-0602 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0602.

Snapgear Lite+ firewall 1.5.4 and 1.5.3 allows remote attackers to cause a denial of service (crash) via a large number of connections to (1) the HTTP web management port, or (2) the PPTP port.


Provide references for further information: Can you share references or external links related to CVE-2002-0602?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.snapgear.com/releases.html'}, {'name': '4657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4657'}, {'name': '20020502 [VulnWatch] KPMG-2002017: Snapgear Lite+ Firewall Denial of Service', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0050.html'}, {'name': 'snapgear-vpn-pptp-dos(8986)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8986'}, {'name': 'snapgear-vpn-http-dos(8985)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8985'}, {'name': '20020502 KPMG-2002017: Snapgear Lite+ Firewall Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102035583114759&w=2'}, {'name': '4658', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4658'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0602?


Explain the CVE ID: What does the identifier CVE-2002-0603 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0603.

Snapgear Lite+ firewall 1.5.3 allows remote attackers to cause a denial of service (IPSEC crash) via a zero length packet to UDP port 500.


Provide references for further information: Can you share references or external links related to CVE-2002-0603?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.snapgear.com/releases.html'}, {'name': 'snapgear-vpn-ipsec-dos(8987)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8987.php'}, {'name': '20020502 [VulnWatch] KPMG-2002017: Snapgear Lite+ Firewall Denial of Service', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0050.html'}, {'name': '20020502 KPMG-2002017: Snapgear Lite+ Firewall Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102035583114759&w=2'}, {'name': '4659', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4659'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0603?


Explain the CVE ID: What does the identifier CVE-2002-0604 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0604.

Snapgear Lite+ firewall 1.5.3 and 1.5.4 allows remote attackers to cause a denial of service (crash) via a large number of packets with malformed IP options.


Provide references for further information: Can you share references or external links related to CVE-2002-0604?

{'name': '4660', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4660'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.snapgear.com/releases.html'}, {'name': '20020502 [VulnWatch] KPMG-2002017: Snapgear Lite+ Firewall Denial of Service', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0050.html'}, {'name': 'snapgear-vpn-ipoptions-dos(8988)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8988.php'}, {'name': '20020502 KPMG-2002017: Snapgear Lite+ Firewall Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102035583114759&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0604?


Explain the CVE ID: What does the identifier CVE-2002-0605 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0605.

Buffer overflow in Flash OCX for Macromedia Flash 6 revision 23 (6,0,23,0) allows remote attackers to execute arbitrary code via a long movie parameter.


Provide references for further information: Can you share references or external links related to CVE-2002-0605?

{'name': '4664', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4664'}, {'name': '20020503 Macromedia Flash Activex Buffer overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102039374017185&w=2'}, {'name': '20020503 Macromedia Flash Activex Buffer overflow', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://marc.info/?l=vuln-dev&m=102038919414726&w=2'}, {'name': '20020502 [VulnWatch] Macromedia Flash Activex Buffer overflow', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0051.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.macromedia.com/support/flash/ts/documents/buf_ovflow_623.htm'}, {'name': '5177', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5177'}, {'name': 'flash-activex-movie-bo(8993)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8993.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0605?


Explain the CVE ID: What does the identifier CVE-2002-0606 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0606.

Buffer overflow in 3Cdaemon 2.0 FTP server allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long commands such as login.


Provide references for further information: Can you share references or external links related to CVE-2002-0606?

{'name': '20020429 3CDaemon DoS exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0428.html'}, {'name': '4638', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4638'}, {'name': '3cdaemon-ftp-bo(8970)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8970.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0606?


Explain the CVE ID: What does the identifier CVE-2002-0607 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0607.

members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.


Provide references for further information: Can you share references or external links related to CVE-2002-0607?

{'name': '4558', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4558'}, {'name': 'snitz-members-sql-injection(8898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8898.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://forum.snitz.com/forum/topic.asp?TOPIC_ID=26770'}, {'name': '20020419 Snitz Forums 2000 remote SQL query manipulation vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0279.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0607?


Explain the CVE ID: What does the identifier CVE-2002-0608 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0608.

Buffer overflow in Matu FTP client 1.74 allows remote FTP servers to execute arbitrary code via a long "220" banner.


Provide references for further information: Can you share references or external links related to CVE-2002-0608?

{'name': '20020422 Matu FTP remote buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0310.html'}, {'name': '4572', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4572'}, {'name': 'matu-ftp-long-string-bo(8911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8911.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0608?


Explain the CVE ID: What does the identifier CVE-2002-0609 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0609.

Vulnerability in HP MPE/iX 6.0 through 7.0 allows attackers to cause a denial of service (system failure with "SA1457 out of i_port_timeout.fix_up_message_frame") via malformed IP packets.


Provide references for further information: Can you share references or external links related to CVE-2002-0609?

{'name': 'HPSBMP0204-013', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4047'}, {'name': 'hp-mpeix-ip-dos(8901)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8901.php'}, {'name': '4536', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4536'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0609?


Explain the CVE ID: What does the identifier CVE-2002-0610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0610.

Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2002-0610?

{'name': 'HPSBMP0204-014', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://online.securityfocus.com/advisories/4082'}, {'name': 'VU#551683', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/551683'}, {'name': '4652', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4652'}, {'name': 'hp-mpeix-ftp-access(8990)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8990.php'}, {'name': 'M-075', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/m-075.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0610?


Explain the CVE ID: What does the identifier CVE-2002-0611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0611.

Directory traversal vulnerability in FileSeek.cgi allows remote attackers to read arbitrary files via a ....// (modified dot dot) in the (1) head or (2) foot parameters, which are not properly filtered.


Provide references for further information: Can you share references or external links related to CVE-2002-0611?

{'name': 'fileseek-cgi-directory-traversal(8858)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8858.php'}, {'name': '20020416 FileSeek cgi script advisory', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0132.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0611?


Explain the CVE ID: What does the identifier CVE-2002-0612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0612.

FileSeek.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) head or (2) foot parameters.


Provide references for further information: Can you share references or external links related to CVE-2002-0612?

{'name': 'fileseek-cgi-command-execution(8857)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8857.php'}, {'name': '20020416 FileSeek cgi script advisory', 'tags': ['mailing-list', 'x_refsource_VULN-DEV'], 'url': 'http://archives.neohapsis.com/archives/vuln-dev/2002-q2/0132.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0612?


Explain the CVE ID: What does the identifier CVE-2002-0613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0613.

dnstools.php for DNSTools 2.0 beta 4 and earlier allows remote attackers to bypass authentication and gain privileges by setting the user_logged_in or user_dnstools_administrator parameters.


Provide references for further information: Can you share references or external links related to CVE-2002-0613?

{'name': 'dnstools-auth-bypass(8948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8948.php'}, {'name': '4617', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4617'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dnstools.com/dnstools_2.0.1.tar.gz'}, {'name': '20020428 dnstools: authentication bypass vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0390.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0613?


Explain the CVE ID: What does the identifier CVE-2002-0614 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0614.

PHP-Survey 20000615 and earlier stores the global.inc file under the web root, which allows remote attackers to obtain sensitive information, including database credentials, if .inc files are not preprocessed by the server.


Provide references for further information: Can you share references or external links related to CVE-2002-0614?

{'name': 'phpsurvey-global-reveal-info(8950)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/8950.php'}, {'name': '20020426 PHP-Survey Database Access Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-04/0383.html'}, {'name': '4612', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4612'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0614?


Explain the CVE ID: What does the identifier CVE-2002-0615 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0615.

The Windows Media Active Playlist in Microsoft Windows Media Player 7.1 stores information in a well known location on the local file system, allowing attackers to execute HTML scripts in the Local Computer zone, aka "Media Playback Script Invocation".


Provide references for further information: Can you share references or external links related to CVE-2002-0615?

{'name': '5110', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5110'}, {'name': 'mediaplayer-playlist-script-execution(9422)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9422.php'}, {'name': 'MS02-032', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0615?


Explain the CVE ID: What does the identifier CVE-2002-0616 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0616.

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by attaching an inline macro to an object within an Excel workbook, aka the "Excel Inline Macros Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2002-0616?

{'name': 'excel-inline-macro-execution(9397)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9397.php'}, {'name': 'MS02-031', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031'}, {'name': '5063', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5063'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0616?


Explain the CVE ID: What does the identifier CVE-2002-0617 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0617.

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code by creating a hyperlink on a drawing shape in a source workbook that points to a destination workbook containing an autoexecute macro, aka "Hyperlinked Excel Workbook Macro Bypass."


Provide references for further information: Can you share references or external links related to CVE-2002-0617?

{'name': '5175', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/5175'}, {'name': 'MS02-031', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031'}, {'name': '5064', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5064'}, {'name': 'excel-hyperlink-macro-execution(9398)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/9398'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0617?


Explain the CVE ID: What does the identifier CVE-2002-0618 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0618.

The Macro Security Model in Microsoft Excel 2000 and 2002 for Windows allows remote attackers to execute code in the Local Computer zone by embedding HTML scripts within an Excel workbook that contains an XSL stylesheet, aka "Excel XSL Stylesheet Script Execution".


Provide references for further information: Can you share references or external links related to CVE-2002-0618?

{'name': '20020524 Excel XP xml stylesheet problems', 'tags': ['mailing-list', 'x_refsource_NTBUGTRAQ'], 'url': 'http://marc.info/?l=ntbugtraq&m=102256054320377&w=2'}, {'name': '4821', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4821'}, {'name': 'MS02-031', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031'}, {'name': 'excel-xsl-script-execution(9399)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9399.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guninski.com/ex%24el2.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0618?


Explain the CVE ID: What does the identifier CVE-2002-0619 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0619.

The Mail Merge Tool in Microsoft Word 2002 for Windows, when Microsoft Access is present on a system, allows remote attackers to execute Visual Basic (VBA) scripts within a mail merge document that is saved in HTML format, aka a "Variant of MS00-071, Word Mail Merge Vulnerability" (CVE-2000-0788).


Provide references for further information: Can you share references or external links related to CVE-2002-0619?

{'name': 'MS02-031', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-031'}, {'name': '5066', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5066'}, {'name': '20020514 dH team & SECURITY.NNOV: A variant of "Word Mail Merge" vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102139136019862&w=2'}, {'name': 'word-mail-merge-variant(9077)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/9077.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0619?


Explain the CVE ID: What does the identifier CVE-2002-0620 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0620.

Buffer overflow in the Profile Service of Microsoft Commerce Server 2000 allows remote attackers to cause the server to fail or run arbitrary code in the LocalSystem security context via an input field using an affected API.


Provide references for further information: Can you share references or external links related to CVE-2002-0620?

{'name': '4853', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4853'}, {'name': 'MS02-033', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-033'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-0620?


Explain the CVE ID: What does the identifier CVE-2002-0621 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-0621.

Buffer overflow in the Office Web Components (OWC) package installer used by Microsoft Commerce Server 2000 allows remote attackers to cause the process to fail or run arbitrary code in the LocalSystem security context via certain input to the OWC package installer.