Provide references for further information: Can you share references or external links related to CVE-2002-1311?

{'name': 'courier-mta-insecure-permissions(10643)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10643.php'}, {'name': '6189', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6189'}, {'name': 'DSA-197', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-197'}, {'name': '20021119 GLSA: courier', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103794021013436&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1311?


Explain the CVE ID: What does the identifier CVE-2002-1312 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1312.

Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable/DSL routers with firmware before 1.43.3 with remote management enabled allows remote attackers to cause a denial of service (router crash) via a long password.


Provide references for further information: Can you share references or external links related to CVE-2002-1312?

{'name': '20021202 CORE-20021005: Vulnerability Report For Linksys Devices', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2002-12/0022.html'}, {'name': '6208', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6208'}, {'name': '6301', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6301'}, {'name': '20021119 Denial of Service Vulnerability in Linksys Cable/DSL Routers', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=36&type=vulnerabilities&flashstatus=true'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www1.corest.com/common/showdoc.php?idx=276&idxseccion=10'}, {'name': 'linksys-etherfast-password-dos(10654)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10654'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1312?


Explain the CVE ID: What does the identifier CVE-2002-1313 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1313.

nullmailer 1.00RC5 and earlier allows local users to cause a denial of service via an email to a local user that does not exist, which generates an error that causes nullmailer to stop sending mail to all users.


Provide references for further information: Can you share references or external links related to CVE-2002-1313?

{'name': 'DSA-198', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-198'}, {'name': '6193', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6193'}, {'name': 'nullmailer-nonexistent-user-dos(10649)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10649'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1313?


Explain the CVE ID: What does the identifier CVE-2002-1315 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1315.

Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).


Provide references for further information: Can you share references or external links related to CVE-2002-1315?

{'name': '49475', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1'}, {'name': 'iplanet-admin-log-xss(10692)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10692.php'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt'}, {'name': '6202', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6202'}, {'name': '20021118 iPlanet WebServer, remote root compromise', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html'}, {'name': '20021119 iPlanet WebServer, remote root compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103772308030269&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1315?


Explain the CVE ID: What does the identifier CVE-2002-1316 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1316.

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).


Provide references for further information: Can you share references or external links related to CVE-2002-1316?

{'name': '49475', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1'}, {'name': 'iplanet-perl-command-execution(10693)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10693.php'}, {'name': '6203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6203'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt'}, {'name': '20021118 iPlanet WebServer, remote root compromise', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html'}, {'name': '20021119 iPlanet WebServer, remote root compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103772308030269&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1316?


Explain the CVE ID: What does the identifier CVE-2002-1317 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1317.

Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.


Provide references for further information: Can you share references or external links related to CVE-2002-1317?

{'name': 'HPSBUX0212-228', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/advisories/4988'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/48879'}, {'name': '20021125 ISS Security Brief: Solaris fs.auto Remote Compromise Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103825150527843&w=2'}, {'name': 'oval:org.mitre.oval:def:149', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A149'}, {'name': 'CA-2002-34', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-34.html'}, {'name': 'oval:org.mitre.oval:def:152', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A152'}, {'name': 'oval:org.mitre.oval:def:2816', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2816'}, {'name': 'VU#312313', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/312313'}, {'name': '20021125 Solaris fs.auto Remote Compromise Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21541'}, {'name': 'solaris-fsauto-execute-code(10375)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10375.php'}, {'name': '20021202-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021202-01-I'}, {'name': '6241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6241'}, {'name': 'N-024', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-024.shtml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1317?


Explain the CVE ID: What does the identifier CVE-2002-1318 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1318.

Buffer overflow in samba 2.2.2 through 2.2.6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an encrypted password that causes the overflow during decryption in which a DOS codepage string is converted to a little-endian UCS2 unicode string.


Provide references for further information: Can you share references or external links related to CVE-2002-1318?

{'name': 'oval:org.mitre.oval:def:1467', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1467'}, {'name': 'VU#958321', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/958321'}, {'name': 'CLA-2002:550', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000550'}, {'name': 'samba-password-change-bo(10683)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10683'}, {'name': 'SuSE-SA:2002:045', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_045_samba.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://us1.samba.org/samba/whatsnew/samba-2.2.7.html'}, {'name': '20021121 GLSA: samba', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103801986818076&w=2'}, {'name': 'DSA-200', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-200'}, {'name': 'HPSBUX0212-230', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.ciac.org/ciac/bulletins/n-023.shtml'}, {'name': '20021129 [OpenPKG-SA-2002.012] OpenPKG Security Advisory (samba)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103859045302448&w=2'}, {'name': 'N-019', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-019.shtml'}, {'name': '6210', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6210'}, {'name': 'RHSA-2002:266', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-266.html'}, {'name': '53580', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/53580'}, {'name': '20021204-01-I', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021204-01-I'}, {'name': 'N-023', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-023.shtml'}, {'name': 'MDKSA-2002:081', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-081.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1318?


Explain the CVE ID: What does the identifier CVE-2002-1319 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1319.

The Linux kernel 2.4.20 and earlier, and 2.5.x, when running on x86 systems, allows local users to cause a denial of service (hang) via the emulation mode, which does not properly clear TF and NT EFLAGs.


Provide references for further information: Can you share references or external links related to CVE-2002-1319?

{'name': '20021111 i386 Linux kernel DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103714004623587&w=2'}, {'name': 'linux-kernel-tf-dos(10576)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10576'}, {'name': 'CLA-2002:553', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000553'}, {'name': '20021114 Re: i386 Linux kernel DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103737292709297&w=2'}, {'name': 'RHSA-2002:264', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-264.html'}, {'name': '6115', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6115'}, {'name': 'RHSA-2002:262', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2002-262.html'}, {'name': 'RHSA-2002:263', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-263.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1319?


Explain the CVE ID: What does the identifier CVE-2002-1320 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1320.

Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of quotation marks (").


Provide references for further information: Can you share references or external links related to CVE-2002-1320?

{'name': 'RHSA-2002:270', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-270.html'}, {'name': 'MDKSA-2002:084', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-084.php'}, {'name': 'pine-from-header-dos(10555)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10555.php'}, {'name': '6120', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6120'}, {'name': '20021107 Remote pine Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103668430620531&w=2'}, {'name': 'ESA-20021127-032', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/engarde_advisory-2614.html'}, {'name': 'SuSE-SA:2002:046', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_046_pine.html'}, {'name': 'RHSA-2002:271', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-271.html'}, {'name': '20021202 GLSA: pine', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103884988306241&w=2'}, {'name': 'CLA-2002:551', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000551'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1320?


Explain the CVE ID: What does the identifier CVE-2002-1321 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1321.

Multiple buffer overflows in RealOne and RealPlayer allow remote attackers to execute arbitrary code via (1) a Synchronized Multimedia Integration Language (SMIL) file with a long parameter, (2) a long long filename in a rtsp:// request, e.g. from a .m3u file, or (3) certain "Now Playing" options on a downloaded file with a long filename.


Provide references for further information: Can you share references or external links related to CVE-2002-1321?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://service.real.com/help/faq/security/bufferoverrun_player.html'}, {'name': '6229', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6229'}, {'name': '20021122 Mulitple Buffer Overflow conditions in RealPlayer/RealOne (#NISR22112002)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103808645120764&w=2'}, {'name': '6227', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6227'}, {'name': 'realplayer-rtsp-filename-bo(10677)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10677'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1321?


Explain the CVE ID: What does the identifier CVE-2002-1322 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1322.

Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g. via nmap.


Provide references for further information: Can you share references or external links related to CVE-2002-1322?

{'name': '20021122 ClearCase DoS vulnerabilty', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103808239618238&w=2'}, {'name': '20021122 ClearCase DoS vulnerabilty', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0084.html'}, {'name': '6228', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6228'}, {'name': 'clearcase-tcp-scan-dos(10675)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10675'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1322?


Explain the CVE ID: What does the identifier CVE-2002-1323 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1323.

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.


Provide references for further information: Can you share references or external links related to CVE-2002-1323?

{'name': 'RHSA-2003:256', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-256.html'}, {'name': '20021220 GLSA: perl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104040175522502&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5'}, {'name': 'SCOSA-2004.1', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.1/SCOSA-2004.1.txt'}, {'name': 'RHSA-2003:257', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-257.html'}, {'name': '20021219 TSLSA-2002-0087 - perl', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104033126305252&w=2'}, {'name': '20030606-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030606-01-A'}, {'name': '20021216 [OpenPKG-SA-2002.014] OpenPKG Security Advisory (perl)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104005919814869&w=2'}, {'name': 'CSSA-2004-007.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-007.0.txt'}, {'name': 'safe-pm-bypass-restrictions(10574)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10574.php'}, {'name': '3814', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/3814'}, {'name': 'oval:org.mitre.oval:def:1160', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1160'}, {'name': '2183', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/2183'}, {'name': 'DSA-208', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-208'}, {'name': '6111', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6111'}, {'name': '20021105 Perl Safe.pm compartment reuse vuln', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0061.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1323?


Explain the CVE ID: What does the identifier CVE-2002-1325 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1325.

Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2002-1325?

{'name': 'MS02-069', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069'}, {'name': '6380', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1325?


Explain the CVE ID: What does the identifier CVE-2002-1327 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1327.

Buffer overflow in the Windows Shell function in Microsoft Windows XP allows remote attackers to execute arbitrary code via an .MP3 or .WMA audio file with a corrupt custom attribute, aka "Unchecked Buffer in Windows Shell Could Enable System Compromise."


Provide references for further information: Can you share references or external links related to CVE-2002-1327?

{'name': 'VU#591890', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/591890'}, {'name': '20021219 Foundstone Research Labs Advisory - Exploitable Windows XP Media Files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104025849109384&w=2'}, {'name': '6427', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6427'}, {'name': 'winxp-windows-shell-bo(10892)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10892'}, {'name': 'CA-2002-37', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-37.html'}, {'name': 'MS02-072', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-072'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1327?


Explain the CVE ID: What does the identifier CVE-2002-1334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1334.

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.


Provide references for further information: Can you share references or external links related to CVE-2002-1334?

{'name': 'imagefolio-imagefolio-nphbuild-xss(10718)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10718'}, {'name': '1005681', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005681'}, {'name': '20021127 Cross-site Scripting Vulnerability in ImageFolio Image Gallery Software', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103842773205148&w=2'}, {'name': '6265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6265'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1334?


Explain the CVE ID: What does the identifier CVE-2002-1335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1335.

Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.


Provide references for further information: Can you share references or external links related to CVE-2002-1335?

{'name': 'RHSA-2003:045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-045.html'}, {'name': '6793', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6793'}, {'name': '8031', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8031'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mi.med.tohoku.ac.jp/~satodai/w3m-dev-en/200211.month/838.html'}, {'name': 'OpenPKG-SA-2003.009', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.009.html'}, {'name': '8015', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8015'}, {'name': '8016', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8016'}, {'name': '6981', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/6981'}, {'name': 'DSA-251', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-251'}, {'name': 'RHSA-2003:044', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-044.html'}, {'name': '8053', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8053'}, {'name': 'w3m-html-frame-xss(10842)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10842'}, {'name': 'DSA-249', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-249'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=124484'}, {'name': 'DSA-250', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-250'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1335?


Explain the CVE ID: What does the identifier CVE-2002-1336 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1336.

TightVNC before 1.2.6 generates the same challenge string for multiple connections, which allows remote attackers to bypass VNC authentication by sniffing the challenge and response of other users.


Provide references for further information: Can you share references or external links related to CVE-2002-1336?

{'name': 'vnc-weak-authentication(5992)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/5992'}, {'name': 'RHSA-2002:287', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-287.html'}, {'name': '20020724 VNC authentication weakness', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102753170201524&w=2'}, {'name': 'RHSA-2003:041', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-041.html'}, {'name': 'MDKSA-2003:022', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:022'}, {'name': 'CLA-2003:640', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000640'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.tightvnc.com/WhatsNew.txt'}, {'name': '20020726 RE: VNC authentication weakness', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=102769183913594&w=2'}, {'name': '5296', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/5296'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1336?


Explain the CVE ID: What does the identifier CVE-2002-1337 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1337.

Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.


Provide references for further information: Can you share references or external links related to CVE-2002-1337?

{'name': 'RHSA-2003:073', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-073.html'}, {'name': '20030301-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20030301-01-P'}, {'name': 'IY40501', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY40501&apar=only'}, {'name': '20030303 Fwd: APPLE-SA-2003-03-03 sendmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104678862109841&w=2'}, {'name': 'RHSA-2003:227', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-227.html'}, {'name': '6991', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6991'}, {'name': 'VU#398025', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/398025'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.sendmail.org/8.12.8.html'}, {'name': 'DSA-257', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-257'}, {'name': '20030304 [LSD] Technical analysis of the remote sendmail vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104678739608479&w=2'}, {'name': 'oval:org.mitre.oval:def:2222', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2222'}, {'name': 'RHSA-2003:074', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-074.html'}, {'name': 'CA-2003-07', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2003-07.html'}, {'name': '20030303 sendmail 8.12.8 available', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104673778105192&w=2'}, {'name': 'MDKSA-2003:028', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:028'}, {'name': 'IY40500', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY40500&apar=only'}, {'name': 'sendmail-header-processing-bo(10748)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10748.php'}, {'name': 'CSSA-2003-SCO.6', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.sco.com/pub/updates/OpenServer/CSSA-2003-SCO.6'}, {'name': 'CSSA-2003-SCO.5', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.5'}, {'name': 'CLA-2003:571', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000571'}, {'name': 'NetBSD-SA2003-002', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-002.txt.asc'}, {'name': 'HPSBUX0302-246', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://marc.info/?l=bugtraq&m=104679411316818&w=2'}, {'name': '20030303 Remote Sendmail Header Processing Vulnerability', 'tags': ['third-party-advisory', 'x_refsource_ISS'], 'url': 'http://www.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=21950'}, {'name': 'IY40502', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/search.wss?rs=0&q=IY40502&apar=only'}, {'name': '20030304 GLSA:  sendmail (200303-4)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104678862409849&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1337?


Explain the CVE ID: What does the identifier CVE-2002-1338 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1338.

The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files.


Provide references for further information: Can you share references or external links related to CVE-2002-1338?

{'tags': ['x_refsource_MISC'], 'url': 'http://security.greymagic.com/adv/gm008-ie/'}, {'name': 'owc-chart-load-exist(8784)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/8784'}, {'name': 'VU#156123', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/156123'}, {'name': '20020408 Multiple local files detection issues with OWC in IE (GM#008-IE)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101830175621193&w=2'}, {'name': '4454', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/4454'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1338?


Explain the CVE ID: What does the identifier CVE-2002-1339 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1339.

The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to determine the existence of local files based on exceptions, or to read WorkSheet XML files.


Provide references for further information: Can you share references or external links related to CVE-2002-1339?

{'tags': ['x_refsource_MISC'], 'url': 'http://security.greymagic.com/adv/gm008-ie/'}, {'name': '20020408 Multiple local files detection issues with OWC in IE (GM#008-IE)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=101830175621193&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1339?


Explain the CVE ID: What does the identifier CVE-2002-1340 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1340.

The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the existence of local files by detecting an exception.


Provide references for further information: Can you share references or external links related to CVE-2002-1340?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1340?


Explain the CVE ID: What does the identifier CVE-2002-1341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1341.

Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2) passed_id parameters.


Provide references for further information: Can you share references or external links related to CVE-2002-1341?

{'name': '20021215 GLSA: squirrelmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104004924002662&w=2'}, {'name': 'squirrelmail-readbody-xss(10754)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10754'}, {'name': '6302', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6302'}, {'name': '20021203 SquirrelMail v1.2.9 XSS bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103893844126484&w=2'}, {'name': '20021203 Re: SquirrelMail v1.2.9 XSS bugs', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103911130503272&w=2'}, {'name': 'DSA-220', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-220'}, {'name': '8220', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8220'}, {'tags': ['x_refsource_MISC'], 'url': 'http://f0kp.iplus.ru/bz/008.txt'}, {'name': 'RHSA-2003:042', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-042.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1341?


Explain the CVE ID: What does the identifier CVE-2002-1342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1342.

Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2002-1342?

{'name': 'smb2www-command-execution(10768)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10768.php'}, {'name': 'DSA-203', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-203'}, {'name': '6313', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6313'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1342?


Explain the CVE ID: What does the identifier CVE-2002-1344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1344.

Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2) .. (dot dot) sequences.


Provide references for further information: Can you share references or external links related to CVE-2002-1344?

{'name': 'CLSA-2002:552', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000552'}, {'name': 'CSSA-2003-003.0', 'tags': ['vendor-advisory', 'x_refsource_SCO'], 'url': 'ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-003.0.txt'}, {'name': 'DSA-209', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2002/dsa-209'}, {'name': '20021219 TSLSA-2002-0089 - wget', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104033016703851&w=2'}, {'name': 'N-022', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-022.shtml'}, {'name': '6360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6360'}, {'name': 'RHSA-2002:256', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-256.html'}, {'name': 'MDKSA-2002:086', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-086.php'}, {'name': '20021211 Directory Traversal Vulnerabilities in FTP Clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103962838628940&w=2'}, {'name': 'CLA-2002:552', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000552'}, {'name': 'RHSA-2002:229', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-229.html'}, {'name': 'CSSA-2003.003.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'http://www.securityfocus.com/archive/1/307045/30/26300/threaded'}, {'name': '20021210 Directory Traversal Vulnerabilities in FTP Clients', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html'}, {'name': '6352', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6352'}, {'name': 'VU#210148', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/210148'}, {'name': 'wget-ftp-filename-traversal(10820)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10820.php'}, {'name': 'OpenPKG-SA-2003.007', 'tags': ['vendor-advisory', 'x_refsource_OPENPKG'], 'url': 'http://www.openpkg.com/security/advisories/OpenPKG-SA-2003.007.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1344?


Explain the CVE ID: What does the identifier CVE-2002-1345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1345.

Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames containing /absolute/path or .. (dot dot) sequences.


Provide references for further information: Can you share references or external links related to CVE-2002-1345?

{'name': '6360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6360'}, {'name': 'VU#210409', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/210409'}, {'name': '20021211 Directory Traversal Vulnerabilities in FTP Clients', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103962838628940&w=2'}, {'name': '20021205-01-A', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20021205-01-A'}, {'name': '20021210 Directory Traversal Vulnerabilities in FTP Clients', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0102.html'}, {'name': 'ftp-client-filename-traversal(10821)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/10821.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1345?


Explain the CVE ID: What does the identifier CVE-2002-1347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1347.

Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.


Provide references for further information: Can you share references or external links related to CVE-2002-1347?

{'name': 'cyrus-sasl-logwriter-bo(10812)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10812'}, {'name': 'SuSE-SA:2002:048', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html'}, {'name': '000557', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557'}, {'name': '6349', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6349'}, {'name': '20021209 Cyrus SASL library buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103946297703402&w=2'}, {'name': 'DSA-215', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-215'}, {'name': 'cyrus-sasl-saslauthd-bo(10811)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10811'}, {'name': '6348', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6348'}, {'name': 'APPLE-SA-2005-03-21', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html'}, {'name': '6347', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6347'}, {'name': '200212-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.securityfocus.com/advisories/4826'}, {'name': 'cyrus-sasl-username-bo(10810)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10810'}, {'name': 'RHSA-2002:283', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-283.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1347?


Explain the CVE ID: What does the identifier CVE-2002-1348 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1348.

w3m before 0.3.2.2 does not properly escape HTML tags in the ALT attribute of an IMG tag, which could allow remote attackers to access files or cookies.


Provide references for further information: Can you share references or external links related to CVE-2002-1348?

{'name': 'RHSA-2003:045', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-045.html'}, {'name': 'DSA-251', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-251'}, {'name': 'RHSA-2003:044', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-044.html'}, {'name': 'DSA-249', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-249'}, {'name': 'DSA-250', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-250'}, {'name': '20030217 GLSA:  w3m', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104552193927323&w=2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=126233'}, {'name': 'w3m-img-alt-xss(11266)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'http://www.iss.net/security_center/static/11266.php'}, {'name': '6794', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6794'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1348?


Explain the CVE ID: What does the identifier CVE-2002-1349 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1349.

Buffer overflow in pop3trap.exe for PC-cillin 2000, 2002, and 2003 allows local users to execute arbitrary code via a long input string to TCP port 110 (POP3).


Provide references for further information: Can you share references or external links related to CVE-2002-1349?

{'name': 'VU#157961', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/157961'}, {'name': '20021210 Unchecked buffer in PC-cillin', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103953822705917&w=2'}, {'name': '6350', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6350'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=12982'}, {'name': 'pccillin-pop3trap-bo(10814)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10814'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.texonet.com/advisories/TEXONET-20021210.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1349?


Explain the CVE ID: What does the identifier CVE-2002-1350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1350.

The BGP decoding routines in tcpdump 3.6.x before 3.7 do not properly copy data, which allows remote attackers to cause a denial of service (application crash).


Provide references for further information: Can you share references or external links related to CVE-2002-1350?

{'name': 'CSSA-2002-050.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-050.0.txt'}, {'name': 'tcpdump-sizeof-memory-corruption(10695)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10695'}, {'name': '[tcpdump-workers] 20011015 Bug in print-bgp.c?', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.tcpdump.org/lists/workers/2001/10/msg00101.html'}, {'name': 'RHSA-2003:033', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-033.html'}, {'name': 'MDKSA-2003:027', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:027'}, {'name': 'RHSA-2003:214', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-214.html'}, {'name': '20021219 TSLSA-2002-0084 - tcpdump', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104032975103398&w=2'}, {'name': 'DSA-206', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-206'}, {'name': 'RHSA-2003:032', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-032.html'}, {'name': '6213', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6213'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1350?


Explain the CVE ID: What does the identifier CVE-2002-1351 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1351.

Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretData function, as demonstrated via a long Nick (nickname) request.


Provide references for further information: Can you share references or external links related to CVE-2002-1351?

{'name': '20021216 Melange Chat System Remote Buffer Overflow', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=33&type=vulnerabilities&flashstatus=false'}, {'name': '1005831', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005831'}, {'name': '6477', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6477'}, {'name': 'melange-msgtext-chatinterpretdata-bo(10939)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10939'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1351?


Explain the CVE ID: What does the identifier CVE-2002-1352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1352.

Per Magne Knutsen's CartMan shopping cart (cartman.php) 1.04 and earlier allows remote attackers to modify product prices by changing the price parameter.


Provide references for further information: Can you share references or external links related to CVE-2002-1352?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/12.16.02c.txt'}, {'name': '1005829', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005829'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1352?


Explain the CVE ID: What does the identifier CVE-2002-1353 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1353.

LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst.


Provide references for further information: Can you share references or external links related to CVE-2002-1353?

{'name': 'localweb2k-userslst-plaintext-passwords(10948)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10948'}, {'name': '7740', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7740/'}, {'name': '1005830', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005830'}, {'name': '20021216 LocalWEB 2000 Insecure Password Storage', 'tags': ['third-party-advisory', 'x_refsource_IDEFENSE'], 'url': 'http://www.idefense.com/application/poi/display?id=31&type=vulnerabilities&flashstatus=false'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1353?


Explain the CVE ID: What does the identifier CVE-2002-1354 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1354.

Directory traversal vulnerability in TYPSoft FTP Server 0.99.8 allows local users to list the contents of arbitrary directories via a ... (dot dot dot) in the cd/CWD command.


Provide references for further information: Can you share references or external links related to CVE-2002-1354?

{'name': '7737', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7737/'}, {'name': 'typsoft-ftp-directory-traversal(6165)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/6165'}, {'name': '1005832', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005832'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1354?


Explain the CVE ID: What does the identifier CVE-2002-1355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1355.

Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.


Provide references for further information: Can you share references or external links related to CVE-2002-1355?

{'name': 'RHSA-2002:290', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-290.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-bgp.c.diff?r1=1.68&r2=1.69'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00007.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1355?


Explain the CVE ID: What does the identifier CVE-2002-1356 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1356.

Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) TDS dissectors, possibly related to a missing field for EndVerifyAck messages.


Provide references for further information: Can you share references or external links related to CVE-2002-1356?

{'name': 'RHSA-2002:290', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-290.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/cgi-bin/viewcvs.cgi/ethereal/packet-lmp.c#rev1.13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ethereal.com/appnotes/enpa-sa-00007.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1356?


Explain the CVE ID: What does the identifier CVE-2002-1357 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1357.

Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.


Provide references for further information: Can you share references or external links related to CVE-2002-1357?

{'name': '1005812', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005812'}, {'name': 'CA-2002-36', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-36.html'}, {'name': 'oval:org.mitre.oval:def:5849', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5849'}, {'name': 'VU#389665', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/389665'}, {'name': 'ssh-transport-length-bo(10868)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10868'}, {'name': '20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html'}, {'name': '6405', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6405'}, {'name': '1005813', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005813'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1357?


Explain the CVE ID: What does the identifier CVE-2002-1358 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1358.

Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite.


Provide references for further information: Can you share references or external links related to CVE-2002-1358?

{'name': '1005812', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005812'}, {'name': 'CA-2002-36', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-36.html'}, {'name': 'oval:org.mitre.oval:def:5721', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5721'}, {'name': '20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html'}, {'name': '1005813', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005813'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1358?


Explain the CVE ID: What does the identifier CVE-2002-1359 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1359.

Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.


Provide references for further information: Can you share references or external links related to CVE-2002-1359?

{'name': '1005812', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005812'}, {'name': 'CA-2002-36', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-36.html'}, {'name': 'ssh-transport-multiple-bo(10870)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10870'}, {'name': '20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html'}, {'name': '6407', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6407'}, {'name': 'oval:org.mitre.oval:def:5848', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5848'}, {'name': '1005813', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005813'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1359?


Explain the CVE ID: What does the identifier CVE-2002-1360 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1360.

Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code due to interactions with the use of null-terminated strings as implemented using languages such as C, as demonstrated by the SSHredder SSH protocol test suite.


Provide references for further information: Can you share references or external links related to CVE-2002-1360?

{'name': '1005812', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005812'}, {'name': 'oval:org.mitre.oval:def:5797', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5797'}, {'name': 'CA-2002-36', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-36.html'}, {'name': '20021216 R7-0009: Vulnerabilities in SSH2 Implementations from Multiple Vendors', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0110.html'}, {'name': '1005813', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1005813'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1360?


Explain the CVE ID: What does the identifier CVE-2002-1361 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1361.

overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP (Security Hardening Patch) installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter.


Provide references for further information: Can you share references or external links related to CVE-2002-1361?

{'name': 'N-025', 'tags': ['third-party-advisory', 'government-resource', 'x_refsource_CIAC'], 'url': 'http://www.ciac.org/ciac/bulletins/n-025.shtml'}, {'name': '49377', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/49377'}, {'name': 'cobalt-shp-overflow-privileges(10776)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10776'}, {'name': 'CA-2002-35', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.cert.org/advisories/CA-2002-35.html'}, {'name': 'VU#810921', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/810921'}, {'name': '6326', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6326'}, {'name': '20021205 Cobalt RaQ4 Remote root exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103912513522807&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1361?


Explain the CVE ID: What does the identifier CVE-2002-1362 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1362.

mICQ 0.4.9 and earlier allows remote attackers to cause a denial of service (crash) via malformed ICQ message types without a 0xFE separator character.


Provide references for further information: Can you share references or external links related to CVE-2002-1362?

{'name': 'RHSA-2003:118', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-118.html'}, {'name': 'micq-0xfe-dos(10872)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10872'}, {'name': '6392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6392'}, {'name': 'DSA-211', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-211'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1362?


Explain the CVE ID: What does the identifier CVE-2002-1363 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1363.

Portable Network Graphics (PNG) library libpng 1.2.5 and earlier does not correctly calculate offsets, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a buffer overflow attack on the row buffers.


Provide references for further information: Can you share references or external links related to CVE-2002-1363?

{'name': 'RHSA-2004:402', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-402.html'}, {'name': 'FLSA:1943', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://bugzilla.fedora.us/show_bug.cgi?id=1943'}, {'name': '6431', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6431'}, {'name': 'RHSA-2003:007', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-007.html'}, {'name': 'oval:org.mitre.oval:def:3657', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3657'}, {'name': 'DSA-213', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-213'}, {'name': 'RHSA-2003:157', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-157.html'}, {'name': 'MDKSA-2003:008', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://frontal2.mandriva.com/security/advisories?name=MDKSA-2003:008'}, {'name': 'libpng-file-offset-bo(10925)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10925'}, {'name': 'MDKSA-2004:063', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:063'}, {'name': 'RHSA-2003:119', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-119.html'}, {'name': 'RHSA-2004:249', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2004-249.html'}, {'name': 'RHSA-2003:006', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-006.html'}, {'name': 'SUSE-SA:2003:0004', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_004_libpng.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1363?


Explain the CVE ID: What does the identifier CVE-2002-1364 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1364.

Buffer overflow in the get_origin function in traceroute-nanog allows attackers to execute arbitrary code via long WHOIS responses.


Provide references for further information: Can you share references or external links related to CVE-2002-1364?

{'name': 'DSA-254', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-254'}, {'name': '6166', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6166'}, {'name': 'traceroute-nanog-getorigin-bo(10778)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10778'}, {'name': '20021129 Exploit for traceroute-nanog overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103858895600963&w=2'}, {'name': 'SuSE-SA:2002:043', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2002_043_traceroute_nanog_nkitb.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1364?


Explain the CVE ID: What does the identifier CVE-2002-1365 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1365.

Heap-based buffer overflow in Fetchmail 6.1.3 and earlier does not account for the "@" character when determining buffer lengths for local addresses, which allows remote attackers to execute arbitrary code via a header with a large number of local addresses.


Provide references for further information: Can you share references or external links related to CVE-2002-1365?

{'name': '6390', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6390'}, {'name': 'MDKSA-2003:011', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:011'}, {'name': '20021213 Advisory 05/2002: Another Fetchmail Remote Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103979751818638&w=2'}, {'name': '20021215 GLSA: fetchmail', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104004858802000&w=2'}, {'name': 'DSA-216', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-216'}, {'name': 'fetchmail-address-header-bo(10839)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10839'}, {'name': 'RHSA-2002:293', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-293.html'}, {'name': 'CLA-2002:554', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000554'}, {'name': 'RHSA-2002:294', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-294.html'}, {'name': 'RHSA-2003:155', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-155.html'}, {'name': 'CSSA-2003-001.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-001.0.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/052002.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1365?


Explain the CVE ID: What does the identifier CVE-2002-1366 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1366.

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or overwrite arbitrary files via file race conditions, as demonstrated by ice-cream.


Provide references for further information: Can you share references or external links related to CVE-2002-1366?

{'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html'}, {'name': 'DSA-232', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-232'}, {'name': 'SuSE-SA:2003:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_002_cups.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/12.19.02.txt'}, {'name': 'RHSA-2002:295', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-295.html'}, {'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104032149026670&w=2'}, {'name': 'cups-certs-race-condition(10907)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10907'}, {'name': '6435', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6435'}, {'name': 'MDKSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1366?


Explain the CVE ID: What does the identifier CVE-2002-1367 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1367.

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication via a certain UDP packet, which can then be used to perform unauthorized activities such as stealing the local root certificate for the administration server via a "need authorization" page, as demonstrated by new-coke.


Provide references for further information: Can you share references or external links related to CVE-2002-1367?

{'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html'}, {'name': 'CLSA-2003:702', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702'}, {'name': 'DSA-232', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-232'}, {'name': 'SuSE-SA:2003:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_002_cups.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/12.19.02.txt'}, {'name': 'RHSA-2002:295', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-295.html'}, {'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104032149026670&w=2'}, {'name': 'MDKSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001'}, {'name': '6436', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6436'}, {'name': 'cups-udp-add-printers(10908)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10908'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1367?


Explain the CVE ID: What does the identifier CVE-2002-1368 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1368.

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.


Provide references for further information: Can you share references or external links related to CVE-2002-1368?

{'name': 'cups-neg-memcpy-bo(10909)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10909'}, {'name': '7858', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7858'}, {'name': '7843', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7843'}, {'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html'}, {'name': '9325', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/9325/'}, {'name': 'CLSA-2003:702', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702'}, {'name': 'CSSA-2003-004.0', 'tags': ['vendor-advisory', 'x_refsource_CALDERA'], 'url': 'ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt'}, {'name': '7756', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7756/'}, {'name': '7907', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7907'}, {'name': 'MDKSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2003:001'}, {'name': '7913', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7913/'}, {'name': '7794', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7794'}, {'name': 'DSA-232', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-232'}, {'name': 'SuSE-SA:2003:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_002_cups.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/12.19.02.txt'}, {'name': 'RHSA-2002:295', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-295.html'}, {'name': '6437', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6437'}, {'name': '7803', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/7803'}, {'name': '8080', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/8080/'}, {'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104032149026670&w=2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1368?


Explain the CVE ID: What does the identifier CVE-2002-1369 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1369.

jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.


Provide references for further information: Can you share references or external links related to CVE-2002-1369?

{'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html'}, {'name': 'CLSA-2003:702', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702'}, {'name': 'DSA-232', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-232'}, {'name': 'SuSE-SA:2003:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_002_cups.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/12.19.02.txt'}, {'name': 'RHSA-2002:295', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-295.html'}, {'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104032149026670&w=2'}, {'name': 'MDKSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001'}, {'name': 'cups-strncat-options-bo(10910)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10910'}, {'name': '6438', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6438'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1369?


Explain the CVE ID: What does the identifier CVE-2002-1370 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1370.


Provide references for further information: Can you share references or external links related to CVE-2002-1370?


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1370?


Explain the CVE ID: What does the identifier CVE-2002-1371 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1371.

filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.


Provide references for further information: Can you share references or external links related to CVE-2002-1371?

{'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html'}, {'name': 'CLSA-2003:702', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702'}, {'name': 'DSA-232', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-232'}, {'name': 'SuSE-SA:2003:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_002_cups.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/12.19.02.txt'}, {'name': 'RHSA-2002:295', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-295.html'}, {'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104032149026670&w=2'}, {'name': 'MDKSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001'}, {'name': 'cups-zero-width-images(10911)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10911'}, {'name': '6439', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6439'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1371?


Explain the CVE ID: What does the identifier CVE-2002-1372 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1372.

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta.


Provide references for further information: Can you share references or external links related to CVE-2002-1372?

{'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_VULNWATCH'], 'url': 'http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html'}, {'name': 'CLSA-2003:702', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702'}, {'name': 'DSA-232', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2003/dsa-232'}, {'name': 'SuSE-SA:2003:002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_002_cups.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.idefense.com/advisory/12.19.02.txt'}, {'name': 'RHSA-2002:295', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-295.html'}, {'name': '20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104032149026670&w=2'}, {'name': 'MDKSA-2003:001', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001'}, {'name': '6440', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6440'}, {'name': 'cups-file-descriptor-dos(10912)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10912'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1372?


Explain the CVE ID: What does the identifier CVE-2002-1373 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1373.

Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.


Provide references for further information: Can you share references or external links related to CVE-2002-1373?

{'name': '20021212 Advisory 04/2002: Multiple MySQL vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103971644013961&w=2'}, {'name': 'CLSA-2002:555', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/042002.html'}, {'name': 'DSA-212', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-212'}, {'name': 'RHSA-2002:288', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-288.html'}, {'name': 'MDKSA-2002:087', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087'}, {'name': 'RHSA-2003:166', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-166.html'}, {'name': '6368', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6368'}, {'name': '200212-2', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://marc.info/?l=bugtraq&m=104004857201968&w=2'}, {'name': 'mysql-comtabledump-dos(10846)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10846'}, {'name': 'SUSE-SA:2003:003', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_003_mysql.html'}, {'name': 'RHSA-2002:289', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-289.html'}, {'name': '2002-0086', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt'}, {'name': 'IMNX-2003-7+-008-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://www.securityfocus.com/advisories/5269'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1373?


Explain the CVE ID: What does the identifier CVE-2002-1374 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1374.

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real password.


Provide references for further information: Can you share references or external links related to CVE-2002-1374?

{'name': '20021212 Advisory 04/2002: Multiple MySQL vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103971644013961&w=2'}, {'name': '20021216 [OpenPKG-SA-2002.013] OpenPKG Security Advisory (mysql)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104005886114500&w=2'}, {'name': 'CLSA-2002:555', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555'}, {'name': 'ESA-20021213-033', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/042002.html'}, {'name': 'DSA-212', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-212'}, {'name': 'RHSA-2002:288', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-288.html'}, {'name': 'MDKSA-2002:087', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087'}, {'name': 'RHSA-2003:166', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-166.html'}, {'name': 'mysql-comchangeuser-password-bypass(10847)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10847'}, {'name': 'GLSA-200212-2', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://marc.info/?l=bugtraq&m=104004857201968&w=2'}, {'name': 'SUSE-SA:2003:003', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_003_mysql.html'}, {'name': 'RHSA-2002:289', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-289.html'}, {'name': '2002-0086', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt'}, {'name': '6373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6373'}, {'name': 'IMNX-2003-7+-008-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://www.securityfocus.com/advisories/5269'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1374?


Explain the CVE ID: What does the identifier CVE-2002-1375 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1375.

The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.


Provide references for further information: Can you share references or external links related to CVE-2002-1375?

{'name': '20021212 Advisory 04/2002: Multiple MySQL vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=103971644013961&w=2'}, {'name': '20021216 [OpenPKG-SA-2002.013] OpenPKG Security Advisory (mysql)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://marc.info/?l=bugtraq&m=104005886114500&w=2'}, {'name': 'CLSA-2002:555', 'tags': ['vendor-advisory', 'x_refsource_CONECTIVA'], 'url': 'http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000555'}, {'name': 'ESA-20021213-033', 'tags': ['vendor-advisory', 'x_refsource_ENGARDE'], 'url': 'http://www.linuxsecurity.com/advisories/engarde_advisory-2660.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.e-matters.de/advisories/042002.html'}, {'name': 'DSA-212', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2002/dsa-212'}, {'name': 'RHSA-2002:288', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-288.html'}, {'name': 'mysql-comchangeuser-password-bo(10848)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/10848'}, {'name': 'MDKSA-2002:087', 'tags': ['vendor-advisory', 'x_refsource_MANDRAKE'], 'url': 'http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:087'}, {'name': 'RHSA-2003:166', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2003-166.html'}, {'name': 'GLSA-200212-2', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://marc.info/?l=bugtraq&m=104004857201968&w=2'}, {'name': 'SUSE-SA:2003:003', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2003_003_mysql.html'}, {'name': '6375', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/6375'}, {'name': 'RHSA-2002:289', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2002-289.html'}, {'name': '2002-0086', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.net/errata/misc/2002/TSL-2002-0086-mysql.asc.txt'}, {'name': 'IMNX-2003-7+-008-01', 'tags': ['vendor-advisory', 'x_refsource_IMMUNIX'], 'url': 'http://www.securityfocus.com/advisories/5269'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2002-1375?


Explain the CVE ID: What does the identifier CVE-2002-1376 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2002-1376.

libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.